使用alibaba Druid 对sql 语句进行校验

蔚落 2021-06-11 15:10 1251阅读 0赞

使用到了 Druid中的 实现了 访问者模式的 各类visitor 对 sql 进行读取与解析

<dependency>
    	<groupId>com.alibaba</groupId>
    	<artifactId>druid</artifactId>
            <version>1.0.17</version>
    </dependency>

List<SqlDto> results = new ArrayList<SqlDto>();
    
    		MySqlStatementParser parser = new MySqlStatementParser(sqls);
    		List<SQLStatement> stmtList = parser.parseStatementList();
    
    		// 将AST通过visitor输出
    		StringBuilder out = new StringBuilder();
    		MySqlOutputVisitor visitor = new MySqlOutputVisitor(out);
    
    		for (SQLStatement stmt : stmtList) {
    			SqlDto sqlDto = new SqlDto();
    
    			stmt.accept(visitor);
    			out.append(";");
    
    			if (stmt instanceof SQLSelectStatement) {
    				sqlDto.setType(SqlType.SELECT);
    				sqlDto.setSql(out.toString());
    			} else if (stmt instanceof SQLInsertStatement) {
    				sqlDto.setType(SqlType.INSERT);
    				sqlDto.setSql(out.toString());
    			} else if (stmt instanceof SQLUpdateStatement) {
    				sqlDto.setType(SqlType.UPDATE);
    				sqlDto.setSql(out.toString());
    			} else if (stmt instanceof SQLDeleteStatement) {
    				sqlDto.setType(SqlType.DELETE);
    				sqlDto.setSql(out.toString());
    			} else if (stmt instanceof SQLAlterTableStatement) {
    				sqlDto.setType(SqlType.ALTER);
    				sqlDto.setSql(out.toString());
    				SQLAlterTableStatement alterStmt = (SQLAlterTableStatement) stmt;
    
    				String tableName = alterStmt.getTableSource().toString().trim();
    				int pos = tableName.indexOf('`');
    				if (pos >= 0) {
    					int end = tableName.lastIndexOf('`');
    					tableName = tableName.substring(1, end);
    				}
    				sqlDto.setTableName(tableName);
    			} else if (stmt instanceof SQLCreateTableStatement) {
    				sqlDto.setType(SqlType.CREATE);
    				sqlDto.setSql(out.toString());
    			} else if (stmt instanceof SQLExplainStatement) {
    				sqlDto.setType(SqlType.EXPLAIN);
    				sqlDto.setSql(out.toString());
    			} else if (stmt instanceof SQLDropTableStatement) {
    				sqlDto.setType(SqlType.DROP);
    				sqlDto.setSql(out.toString());
    			} else if (stmt instanceof MySqlRenameTableStatement) {
    				sqlDto.setType(SqlType.RENAME);
    				sqlDto.setSql(out.toString());
    			} else if (stmt instanceof MySqlReplaceStatement) {
    				sqlDto.setType(SqlType.REPLACE);
    				sqlDto.setSql(out.toString());
    			} else {
    				sqlDto.setType(SqlType.OTHER);
    				sqlDto.setSql(out.toString());
    			}
    
    			results.add(sqlDto);
    			out.setLength(0);
    		}
    
    		return results;

public class SqlExplain {
    
        public static void main(String[] args){
            String sqls = "select ID from BCP_Prize; sel2ect name from BCP_Prize";
            MySqlStatementParser parser = new MySqlStatementParser(sqls);
            List<SQLStatement> stmtList = parser.parseStatementList();
    
            // 将AST通过visitor输出
            StringBuilder out = new StringBuilder();
            MySqlOutputVisitor visitor = new MySqlOutputVisitor(out);
    
            for (SQLStatement stmt : stmtList) {
                stmt.accept(visitor);
                System.out.println(out + ";");
                out.setLength(0);
            }
    
    
        }
    }

![Center][]

[Center]: /images/20210527/5470d36177874e24aa73bb0518df92cf.png