前端之家收集整理的这篇文章主要介绍了
利用正则进行sql解析,
前端之家小编觉得挺不错的,现在分享给大家,也给大家做个参考。
import re
class sqlParser:
def __init__(self,sql):
self.sql = sql
self.paras = None
self.num_para = sql.count('@') # @ only be used as the parameter identify
self.rawstr = ''
s = '.*?@(\w+)'
self.d = {}
for i in range(0,self.num_para):
self.rawstr = "%s%s" %(self.rawstr,s)
compile_obj = re.compile(self.rawstr,re.DOTALL)
match_obj = compile_obj.search(self.sql)
self.all_groups = None
if match_obj != None:
self.all_groups = match_obj.groups()
def getArgs(self):
args = set()
for item in self.all_groups:
args.add(item)
return args
def getsql(self):
for item in self.all_groups:
ori = '@%s' %(item)
val = "%%(%s)s"%(item)
self.sql = self.sql.replace(ori,val)
return self.sql
def setParas(self,paras):
self.paras = paras
def apply(self):
for g in self.all_groups:
#print g
if self.d.has_key(g):
pass
else:
if self.paras.has_key(g):
self.d[g] = self.paras[g]
else:
raise Exception('no value assigned')
def test(self,dd):
self.setParas(dd)
self.apply()
sql = self.sql %self.paras
return {'sql':sql,'parameters':self.d}
if __name__ == "__main__":
sql = """select sysdate from dual where user = '@username1' and password='@password' or username='@username' """
sp = sqlParser(sql)
print sp.getArgs()
print sp.getsql()
dd = {'username1':'abc','username':'aidear','password':'idea'}
print sp.test(dd)