sql注入修改

alibaba · Dec 12, 2019 · b47cb1e · b47cb1e
1 parent 592385b
commit b47cb1e
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/config/src/main/java/com/alibaba/nacos/config/server/service/PersistService.java b/config/src/main/java/com/alibaba/nacos/config/server/service/PersistService.java
@@ -3181,7 +3181,9 @@ public void insertTenantInfoAtomic(String kp, String tenantId, String tenantName
      * @return int
      */
     public int countByTenantId(String tenantId){
-        return jt.queryForObject("select count(1) from tenant_info where tenant_id = '" + tenantId + "'", Integer.class);
+        String[] args = new String[1];
+        args[0] = tenantId;
+        return jt.queryForObject("select count(1) from tenant_info where tenant_id = ?", args, Integer.class);
     }
 
     /**