处理页面传入特殊字符的工具类（针对模糊查询时使用）

水深无声 2023-10-04 16:09 9阅读 0赞

**处理页面传入特殊字符的工具类（针对模糊查询时使用）**  
模糊查询时，当页面传入空的字符串时经过工具类的处理可以正常查询出需要的内容不会导致查询结果和想要的效果不一致的问题。

package com.smartcity.gov.fgw.core.utils;
    
    import org.apache.commons.lang3.StringUtils;
    
    import java.io.UnsupportedEncodingException;
    import java.util.Objects;
    
    public class ParamFilterUtils {
        /**
         * 过滤通过页面表单提交的字符
         */
        private static String[][] FilterChars = { { "<", "<" }, { ">", ">" }, { " ", " " }, { "\"", """ }, { "&", "&" }, { "/", "/" }, { "\\", "\" }, { "\n", "<br>" } };
        /**
         * 过滤通过javascript脚本处理并提交的字符
         */
        private static String[][] FilterScriptChars = { { "\n", "\'+\'\\n\'+\'" }, { "\r", " " }, { "\\", "\'+\'\\\\\'+\'" }, { "\'", "\'+\'\\\'\'+\'" } };
    
        /**
         * 用特殊的字符连接字符串
         *
         * @param strings    要连接的字符串数组
         * @param spilitSign 连接字符
         * @return 连接字符串
         */
        public static String stringConnect(String[] strings, String spilitSign) {
            String str = "";
            for (int i = 0; i < strings.length; i++) {
                str += strings[i] + spilitSign;
            }
            return str;
        }
    
        /**
         * 过滤字符串里的的特殊字符
         *
         * @param str 要过滤的字符串
         * @return 过滤后的字符串
         */
        public static String stringFilter(String str) {
            String[] strArr = stringSpilit(str, "");
            for (int i = 0; i < strArr.length; i++) {
                for (int j = 0; j < FilterChars.length; j++) {
                    if (FilterChars[j][0].equals(strArr[i])) {
                        strArr[i] = FilterChars[j][1];
                    }
                }
            }
            return (stringConnect(strArr, "")).trim();
        }
    
        /**
         * 过滤脚本中的特殊字符（包括回车符(\n)和换行符(\r)）
         *
         * @param str 要进行过滤的字符串
         * @return 过滤后的字符串
         * 2004-12-21 闫
         */
        public static String stringFilterScriptChar(String str) {
            String[] strArr = stringSpilit(str, "");
            for (int i = 0; i < strArr.length; i++) {
                for (int j = 0; j < FilterScriptChars.length; j++) {
                    if (FilterScriptChars[j][0].equals(strArr[i])) {
                        strArr[i] = FilterScriptChars[j][1];
                    }
                }
            }
            return (stringConnect(strArr, "")).trim();
        }
    
        /**
         * 分割字符串
         *
         * @param str         要分割的字符串
         * @param spilitSign 字符串的分割标志
         * @return 分割后得到的字符串数组
         */
        public static String[] stringSpilit(String str, String spilitSign) {
            String[] spilitString = str.split(spilitSign);
            if ("".equals(spilitString[0])) {
                String[] newString = new String[spilitString.length - 1];
                for (int i = 1; i < spilitString.length; i++) {
                    newString[i - 1] = spilitString[i];
                }
                return newString;
            }
            return spilitString;
        }
    
        /**
         * 过滤查询里面的特殊字符
         *
         * @param input
         * @return
         */
        public static String queryFilter(String input) {
            if(StringUtils.isEmpty(input)){
                return null;
            }
            StringBuilder filtered = new StringBuilder(input.length());
            char c;
            for (int i = 0; i < input.length(); i++) {
                c = input.charAt(i);
                if (c == '%') {
                    filtered.append("\\%");
                } else if (c == '_') {
                        filtered.append("\\_");
                } else if (c == '\\') {
                    filtered.append("\\\\");
                } else {
                    filtered.append(c);
                }
            } return filtered.toString();
        }
        /**
         * 全角转半角
         *
         * @param str
         * @return
         *
         * @author mjorcen
         * @email mjorcen@gmail.com
         * @dateTime Sep 27, 2014 2:51:50 PM
         * @version 1
         */
        public static final String toSingleByte(String str) {
            StringBuffer outStrBuf = new StringBuffer("");
    
            String tstr = "";
            byte[] b = null;
            for (int i = 0; i < str.length(); i++) {
                tstr = str.substring(i, i + 1);
                // 全角空格转换成半角空格
                if (Objects.equals(tstr, "　")) {
                    outStrBuf.append(" ");
                    continue;
                }
                try {
                    b = tstr.getBytes("unicode");
                    // 得到 unicode 字节数据
                    if (b[2] == -1) {
                        // 表示全角
                        b[3] = (byte) (b[3] + 32);
                        b[2] = 0;
                        outStrBuf.append(new String(b, "unicode"));
                    } else {
                        outStrBuf.append(tstr);
                    }
                } catch (UnsupportedEncodingException e) {
                    // TODO Auto-generated catch block
                    e.printStackTrace();
                }
    
            } // end for.
            return queryFilter(outStrBuf.toString());
    
        }
    }

**具体使用：**

@Override
        public PageList<TaskDTO> getMySuperviseList(MeetingTasks meetingTasks) {
            //特殊字符处理
            meetingTasks.setKeyWord(ParamFilterUtils.queryFilter(meetingTasks.getKeyWord()));
            PageHelper.startPage(meetingTasks.getPageNum(), meetingTasks.getPageSize());
            List<TaskDTO> list = meetSuperviseMapper.selectAllTask(meetingTasks)
            PageInfo taskDTOPageInfo = new PageInfo(list);
            return new PageList<>(list, taskDTOPageInfo.getTotal());
        }

**对应sql处理：**  
模糊查询条件后面加上 “ESCAPE ‘’” 即可

<if test="keyWord != null and keyWord != ''">
           AND (lower(T1.MEET_NAME) like concat('%',lower(#{keyWord}),'%') ESCAPE '\'
            or
            lower(T1.ASSOCIATED_TASK) like concat('%',lower(#{keyWord}),'%') ESCAPE '\')
          </if>