SQLAdvisor/php-sqlreview/sql.php at master · ppabc/SQLAdvisor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<title>SQL自动审核-自助上线平台</title>
<style type="text/css">
<!--
.STYLE2 {font-size: 50px}
.STYLE3 {font-size: 24px}
-->
</style>
<link rel="stylesheet" type="text/css" href="css/page.css">
</head>

<!-- 每次打开网页 清除页面缓存-->
<HEAD>
<META HTTP-EQUIV="Pragma" CONTENT="no-cache">
<META HTTP-EQUIV="Cache-Control" CONTENT="no-cache">
<META HTTP-EQUIV="Expires" CONTENT="0">
</HEAD>

<body>
<div class="jumbotron" style="background-color:#336699">
  <div class="container">
<span style="float:left;"><img src="image/logo.jpg" height="80" width="113" \></span><font size="11">SQL自动审核-自助上线平台</font>
  </div>
</div>
<div class="jumbotron" style="background-color:#FFF; color:#333; padding:10px;">
  <div class="container">
  <p>输入SQL语句</p>
  </div>
</div>
<form action="sql_review.php" method="post" name="sql_statement" id="form1">
  <label></label>
  <div align="center">
    <label>
    <tr>
        <td>选择你的数据库：</td>
        <td><select name="dbname">
	<?php
	$con=mysql_connect("localhost","root","111111");
	mysql_select_db("sql_db", $con);
	$result = mysql_query("SELECT dbname FROM dbinfo");
	while($row = mysql_fetch_array($result)){
	echo "<option value=\"".$row[0]."\">".$row[0]."</option>"."<br>";
        }?>
        </select><td>
    </tr>
    <textarea name="sql_statement" type="text" rows="100" cols="100" value="select * from hechunyang;" size="1000000" style="width:745px;height:300px;color:blue;font-size:24px;border: 5px dashed #FF9933" />
select * from hechunyang;
    </textarea>
    <br />
    <br />
    </label>
    <label>
    <input name="Submit" type="submit" class="STYLE3" value="提交审核" />
    </label>
  </div>
</form>
<table width="724" border="0" align="center">
  <tr>
    <td width="648"><div align="left">
      <p>使用说明：<br />
        1、针对select/insert/update/create/alter加了规则，delete需要审批。 <br />
        2、语句之间要有空格，例where id = 100，没有空格会影响判断的准确性。 <br />
        3、SQL语句后面要加分号; MySQL解析器规定分号才可以执行SQL。<br />
        <big><font color="#FF0000">4、反引号`可能会造成上线失败，需要用文本编辑器替换掉。</font></big><br />
        <big><font color="#FF0000">5、支持多条SQL解析，用一个分号;分割。例如：<br/>
                                   &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;insert into t1 values(1,'a');<br>
                                   <!-- &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;###### <br>-->
                                   &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;insert into t1 values(2,'b'); </font></big><br />
	<big><font color="#FF0000">6、JSON格式里的双引号要用反斜杠进行转义，例如：{\"dis_text\":\"nba\"}。</font></big></p>
      </div></td>
  </tr>
</table>
<p align="center">&nbsp;</p>
</body>
</html>