转发： sharingsphere 执行sql插入时的关键字usage错误

[Juan Pan <pa...@apache.org>]

Hi,




Firstly, I presume you want to ask questions for ShardingSphere community, right? 
However, it looks like you mistook the email address. Please check the email you sent. 
The recipient is supposed to `dev@shardingsphere.apache.org`, rather than `security@apache.org`, right?


Apache Security Team contacted us with your email. So We also want to get your feedback.
Thanks a lot.


Besides, you could get the answer to the issue you mentioned at[1].


[1] https://github.com/apache/shardingsphere/issues/6429


Cheers,
Trista


 Juan Pan (Trista)
                         
Senior DBA & PMC of Apache ShardingSphere
E-mail: panjuan@apache.org





--------- 转发邮件信息 ---------

发件人：Apache Security Team <se...@apache.org>Apache Security Team <se...@apache.org>
发送日期： 2020年07月24日 21:09
发送至： <pr...@shardingsphere.apache.org>
主题： Fwd: sharingsphere 执行sql插入时的关键字usage错误
I'm not able to determine if this is a report of a security issue;
please respond to them accordingly.

Regards, Mark

---------- Forwarded message ---------
From: 大薛<cn...@163.com>
Date: Fri, Jul 24, 2020 at 2:31 AM
Subject: sharingsphere execute sql Keyword usage error when inserting
To: <se...@apache.org>


Actual SQL: The backtick mark on the keyword usage was removed during
execution, causing sql execution error sql executed by



mybatis-plus ### SQL: INSERT INTO template_sickness_detail_temporary
(price, `usage`, frequency, doctor_advice) VALUES (?, ?, ?,?)


2020-07-24 09:27:00.557 INFO 4660 --- [main] ShardingSphere-SQL: Logic
SQL: INSERT INTO template_sickness_detail_temporary (price,
`usage`,
frequency,
doctor_advice) VALUES (?,
?,
?,
?)

2020-07-24 09:27:00.558  INFO 4660 --- [           main]
ShardingSphere-SQL                       : SQLStatement:
InsertStatement(super=DMLStatement(super=AbstractSQLStatement(type=DML,
tables=Tables(tables=[Table(name=template_sickness_detail_temporary,
alias=Optional.absent())]),
routeConditions=Conditions(orCondition=OrCondition(andConditions=[AndCondition(conditions=[])])),
encryptConditions=Conditions(orCondition=OrCondition(andConditions=[])),
sqlTokens=[TableToken(tableName=template_sickness_detail_temporary,
quoteCharacter=NONE, schemaNameLength=0), SQLToken(startIndex=48)],
parametersIndex=4, logicSQL=INSERT INTO
template_sickness_detail_temporary  (
price,`usage`,frequency,doctor_advice )  VALUES  ( ?,?,?,? )),


2020-07-24 09:27:00.558  INFO 4660 --- [           main]
ShardingSphere-SQL                       : Actual SQL: master0 :::
INSERT INTO template_sickness_detail_temporary   (price, usage,
frequency, doctor_advice) VALUES (?, ?, ?, ?) ::: [56, dddd, deee,
good]