Contents of this article

1. Background description

Second, the cause of the error

Three, the solution

3.1 Scheme One

3.2 Scheme Two

---

java.sql.SQLException: sql injection violation, syntax error: syntax error, error in :'soft YaHei UI'"><span style="color:', expect IDENTIFIER, actual IDENTIFIER pos 1935, line 5, column 1136, token IDENTIFIER YaHei

1. Background description

Project structure: Springboot(2.0.1) + Mybatis(3.4.1) + CKEditor(4.8)

Recently, when the article was published, the background SQL statement suddenly reported an error,java.sql.SQLException: sql injection violation, syntax error: syntax error, error in :'soft YaHei UI'"><span style="color:', expect IDENTIFIER, actual IDENTIFIER pos 1935, line 5, column 1136, token IDENTIFIER YaHei, It is said that there is a problem with SQL injection; it has been running online and stably, why suddenly it reports SQL exception? The figure below is the SQL statement printed by MyBatis. After analysis, Microsoft YaHei UI is recognized as a separator. Eventually lead to SQL INSERT statement error.

Second, the cause of the error

According to the error message printed out in the log,java.sql.SQLException: sql injection violation, syntax error: syntax error, error in :'soft YaHei UI'"><span style="color:', expect IDENTIFIER, actual IDENTIFIER pos 1935, line 5, column 1136, token IDENTIFIER YaHei，SQL abnormality, grammatical error, analysis shows that it must be the incorrect assembly of the SQL statement that caused the injection failure. Copying the log information to the database and beautifying the SQL comparison found that when I published the article, some characters were recognized as separators, and the result was that the SQL injection failed.

Three, the solution

According to the cause of the error, there are several solutions:

3.1 Scheme One

Delete the symbol or text recognized as a separator in the rich text editor, and then give it to Mybatis for analysis.

3.2 Scheme Two

Modify the text font in the rich text editor, as long as it is not recognized as a separator by Mybatis. In response to this error, the solution I took was to change the text font in the rich text editor from Microsoft Yahei to Times New Roman.

 

 

 

end!