fixed #866

getrebuild · Feb 12, 2025 · 4853a4d · 4853a4d
1 parent 14f0619
commit 4853a4d
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/main/java/com/rebuild/web/admin/AdminCli3.java b/src/main/java/com/rebuild/web/admin/AdminCli3.java
@@ -21,6 +21,7 @@
 import com.rebuild.core.support.task.TaskExecutors;
 import com.rebuild.utils.AES;
 import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang.StringEscapeUtils;
 import org.apache.commons.lang.StringUtils;
 
 import java.io.File;
@@ -188,7 +189,8 @@ protected String execSyscfg() {
             else {
                 String value = commands[2];
                 if (item == ConfigurationItem.SN) {
-                    String usql = String.format("update system_config set `VALUE` = '%s' where `ITEM` = 'SN'", value);
+                    String usql = String.format("update system_config set `VALUE` = '%s' where `ITEM` = 'SN'",
+                            StringEscapeUtils.escapeSql(value));
                     Application.getSqlExecutor().execute(usql);
                     // reset: RB NEED RESTART
                     Application.getCommonsCache().evict(ConfigurationItem.SN.name());