milimoe 18854781a6
完善 WebSocket 支持;防止 SQL 注入;修改 Json 自定义转换器基类 (#104)
* 更换任务计划实现方式;修改自定义 Json 转换器基类

* RunTimeController 添加 HTTPClient(WebSocket)支持;SQL 查询修改为参数化,防止注入
2025-01-11 01:09:49 +08:00

79 lines
4.4 KiB
C#

using Milimoe.FunGame.Core.Api.Transmittal;
namespace Milimoe.FunGame.Core.Library.SQLScript.Entity
{
public class RoomQuery : Constant
{
public const string TableName = "Rooms";
public const string Column_ID = "Id";
public const string Column_RoomID = "Roomid";
public const string Column_CreateTime = "CreateTime";
public const string Column_RoomMaster = "RoomMaster";
public const string Column_RoomMasterName = "RoomMasterName";
public const string Column_RoomType = "RoomType";
public const string Column_GameModule = "GameModule";
public const string Column_GameMap = "GameMap";
public const string Column_RoomState = "RoomState";
public const string Column_IsRank = "IsRank";
public const string Column_HasPass = "HasPass";
public const string Column_Password = "Password";
public const string Column_MaxUsers = "MaxUsers";
public const string Select_Rooms = $"{Command_Select} {TableName}.{Command_All}, {UserQuery.TableName}.{UserQuery.Column_Username} {Command_As} {Column_RoomMasterName} " +
$"{Command_From} {TableName} {Command_LeftJoin} {UserQuery.TableName} {Command_On} {UserQuery.TableName}.{UserQuery.Column_UID} = {TableName}.{Column_RoomMaster}";
public static string Insert_CreateRoom(SQLHelper SQLHelper, string roomid, long roomMaster, Library.Constant.RoomType roomType, string gameModule, string gameMap, bool isRank, string password, int maxUsers)
{
Library.Constant.RoomState RoomState = Library.Constant.RoomState.Created;
DateTime NowTime = DateTime.Now;
bool HasPass = password.Trim() != "";
SQLHelper.Parameters["@roomid"] = roomid;
SQLHelper.Parameters["@CreateTime"] = NowTime;
SQLHelper.Parameters["@roomMaster"] = roomMaster;
SQLHelper.Parameters["@roomType"] = (int)roomType;
SQLHelper.Parameters["@gameModule"] = gameModule;
SQLHelper.Parameters["@gameMap"] = gameMap;
SQLHelper.Parameters["@RoomState"] = (int)RoomState;
SQLHelper.Parameters["@isRank"] = isRank ? 1 : 0;
SQLHelper.Parameters["@HasPass"] = HasPass ? 1 : 0;
SQLHelper.Parameters["@password"] = password;
SQLHelper.Parameters["@maxUsers"] = maxUsers;
return $"{Command_Insert} {Command_Into} {TableName} ({Column_RoomID}, {Column_CreateTime}, {Column_RoomMaster}, {Column_RoomType}, {Column_GameModule}, {Column_GameMap}, {Column_RoomState}, {Column_IsRank}, {Column_HasPass}, {Column_Password}, {Column_MaxUsers})" +
$" {Command_Values} (@roomid, @CreateTime, @roomMaster, @roomType, @gameModule, @gameMap, @RoomState, @isRank, @HasPass, @password, @maxUsers)";
}
public static string Delete_Rooms(SQLHelper SQLHelper, params string[] roomids)
{
if (roomids.Length != 0)
{
string where = string.Join("', '", roomids);
SQLHelper.Parameters["@roomids"] = where;
return $"{Command_Delete} {Command_From} {TableName} {Command_Where} {Column_RoomID} {Command_In} (@roomids)";
}
return $"{Command_Delete} {Command_From} {TableName}";
}
public static string Delete_QuitRoom(SQLHelper SQLHelper, string roomID, long roomMaster)
{
SQLHelper.Parameters["@roomID"] = roomID;
SQLHelper.Parameters["@roomMaster"] = roomMaster;
return $"{Command_Delete} {Command_From} {TableName} {Command_Where} {Column_RoomID} = @roomID {Command_And} {Column_RoomMaster} = @roomMaster";
}
public static string Update_QuitRoom(SQLHelper SQLHelper, string roomid, long oldRoomMaster, long newRoomMaster)
{
SQLHelper.Parameters["@roomid"] = roomid;
SQLHelper.Parameters["@oldRoomMaster"] = oldRoomMaster;
SQLHelper.Parameters["@newRoomMaster"] = newRoomMaster;
return $"{Command_Update} {TableName} {Command_Set} {Column_RoomMaster} = @newRoomMaster {Command_Where} {Column_RoomID} = @roomid {Command_And} {Column_RoomMaster} = @oldRoomMaster";
}
public static string Select_IsExistRoom(SQLHelper SQLHelper, string roomid)
{
SQLHelper.Parameters["@roomid"] = roomid;
return $"{Command_Select} {Command_All} {Command_From} {TableName} {Command_Where} {Column_RoomID} = @roomid";
}
}
}