SelectTable.cs 37 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974
  1. // Admin.NET 项目的版权、商标、专利和其他相关权利均受相应法律法规的保护。使用本项目应遵守相关法律法规和许可证的要求。
  2. //
  3. // 本项目主要遵循 MIT 许可证和 Apache 许可证(版本 2.0)进行分发和使用。许可证位于源代码树根目录中的 LICENSE-MIT 和 LICENSE-APACHE 文件。
  4. //
  5. // 不得利用本项目从事危害国家安全、扰乱社会秩序、侵犯他人合法权益等法律法规禁止的活动!任何基于本项目二次开发而产生的一切法律纠纷和责任,我们不承担任何责任!
  6. using AspectCore.Extensions.Reflection;
  7. using System.Dynamic;
  8. namespace Admin.NET.Core.Service;
  9. /// <summary>
  10. ///
  11. /// </summary>
  12. public class SelectTable : ISingleton
  13. {
  14. private readonly IdentityService _identitySvc;
  15. private readonly TableMapper _tableMapper;
  16. private readonly ISqlSugarClient _db;
  17. public SelectTable(IdentityService identityService, TableMapper tableMapper, ISqlSugarClient dbClient)
  18. {
  19. _identitySvc = identityService;
  20. _tableMapper = tableMapper;
  21. _db = dbClient;
  22. }
  23. /// <summary>
  24. /// 判断表名是否正确,若不正确则抛异常
  25. /// </summary>
  26. /// <param name="table"></param>
  27. /// <returns></returns>
  28. public virtual bool IsTable(string table)
  29. {
  30. return _db.DbMaintenance.GetTableInfoList().Any(it => it.Name.Equals(table, StringComparison.CurrentCultureIgnoreCase))
  31. ? true
  32. : throw new Exception($"表名【{table}】不正确!");
  33. }
  34. /// <summary>
  35. /// 判断表的列名是否正确,如果不正确则抛异常,更早地暴露给调用方
  36. /// </summary>
  37. /// <param name="table"></param>
  38. /// <param name="col"></param>
  39. /// <returns></returns>
  40. public virtual bool IsCol(string table, string col)
  41. {
  42. return _db.DbMaintenance.GetColumnInfosByTableName(table).Any(it => it.DbColumnName.Equals(col, StringComparison.CurrentCultureIgnoreCase))
  43. ? true
  44. : throw new Exception($"表【{table}】不存在列【{col}】!请检查输入参数");
  45. }
  46. /// <summary>
  47. /// 查询列表数据
  48. /// </summary>
  49. /// <param name="subtable"></param>
  50. /// <param name="page"></param>
  51. /// <param name="count"></param>
  52. /// <param name="query"></param>
  53. /// <param name="json"></param>
  54. /// <param name="dd"></param>
  55. /// <returns></returns>
  56. public virtual Tuple<dynamic, int> GetTableData(string subtable, int page, int count, int query, string json, JObject dd)
  57. {
  58. var role = _identitySvc.GetSelectRole(subtable);
  59. if (!role.Item1)
  60. throw new Exception(role.Item2);
  61. var selectrole = role.Item2;
  62. subtable = _tableMapper.GetTableName(subtable);
  63. var values = JObject.Parse(json);
  64. page = values["page"] == null ? page : int.Parse(values["page"].ToString());
  65. count = values["count"] == null ? count : int.Parse(values["count"].ToString());
  66. query = values["query"] == null ? query : int.Parse(values["query"].ToString());
  67. values.Remove("page");
  68. values.Remove("count");
  69. // 构造查询过程
  70. var tb = SugarQueryable(subtable, selectrole, values, dd);
  71. // 实际会在这里执行
  72. if (query == 1) // 1-总数
  73. {
  74. return new Tuple<dynamic, int>(null, tb.MergeTable().Count());
  75. }
  76. else
  77. {
  78. if (page > 0) // 分页
  79. {
  80. int total = 0;
  81. if (query == 0)
  82. return new Tuple<dynamic, int>(tb.ToPageList(page, count), total); // 0-对象
  83. else
  84. return new Tuple<dynamic, int>(tb.ToPageList(page, count, ref total), total); // 2-以上全部
  85. }
  86. else // 列表
  87. {
  88. IList l = tb.ToList();
  89. return query == 0 ? new Tuple<dynamic, int>(l, 0) : new Tuple<dynamic, int>(l, l.Count);
  90. }
  91. }
  92. }
  93. /// <summary>
  94. /// 解析并查询
  95. /// </summary>
  96. /// <param name="queryJson"></param>
  97. /// <returns></returns>
  98. public virtual JObject Query(string queryJson)
  99. {
  100. var queryJobj = JObject.Parse(queryJson);
  101. return Query(queryJobj);
  102. }
  103. /// <summary>
  104. /// 单表查询
  105. /// </summary>
  106. /// <param name="queryObj"></param>
  107. /// <param name="nodeName">返回数据的节点名称 默认为 infos</param>
  108. /// <returns></returns>
  109. public virtual JObject QuerySingle(JObject queryObj, string nodeName = "infos")
  110. {
  111. var resultObj = new JObject();
  112. var total = 0;
  113. foreach (var item in queryObj)
  114. {
  115. var key = item.Key.Trim();
  116. if (key.EndsWith("[]"))
  117. {
  118. total = QuerySingleList(resultObj, item, nodeName);
  119. }
  120. else if (key.Equals("func"))
  121. {
  122. ExecFunc(resultObj, item);
  123. }
  124. else if (key.Equals("total@") || key.Equals("total"))
  125. {
  126. resultObj.Add("total", total);
  127. }
  128. }
  129. return resultObj;
  130. }
  131. /// <summary>
  132. /// 获取查询语句
  133. /// </summary>
  134. /// <param name="queryObj"></param>
  135. /// <returns></returns>
  136. public virtual string ToSql(JObject queryObj)
  137. {
  138. foreach (var item in queryObj)
  139. {
  140. if (item.Key.Trim().EndsWith("[]"))
  141. return ToSql(item);
  142. }
  143. return string.Empty;
  144. }
  145. /// <summary>
  146. /// 解析并查询
  147. /// </summary>
  148. /// <param name="queryObj"></param>
  149. /// <returns></returns>
  150. public virtual JObject Query(JObject queryObj)
  151. {
  152. var resultObj = new JObject();
  153. int total;
  154. foreach (var item in queryObj)
  155. {
  156. var key = item.Key.Trim();
  157. if (key.Equals("[]")) // 列表
  158. {
  159. total = QueryMoreList(resultObj, item);
  160. resultObj.Add("total", total); // 只要是列表查询都自动返回总数
  161. }
  162. else if (key.EndsWith("[]"))
  163. {
  164. total = QuerySingleList(resultObj, item);
  165. }
  166. else if (key.Equals("func"))
  167. {
  168. ExecFunc(resultObj, item);
  169. }
  170. else if (key.Equals("total@") || key.Equals("total"))
  171. {
  172. // resultObj.Add("total", total);
  173. continue;
  174. }
  175. else // 单条
  176. {
  177. var template = GetFirstData(key, item.Value.ToString(), resultObj);
  178. if (template != null)
  179. resultObj.Add(key, JToken.FromObject(template));
  180. }
  181. }
  182. return resultObj;
  183. }
  184. // 动态调用方法
  185. private static object ExecFunc(string funcname, object[] param, Type[] types)
  186. {
  187. var method = typeof(FuncList).GetMethod(funcname);
  188. var reflector = method.GetReflector();
  189. var result = reflector.Invoke(new FuncList(), param);
  190. return result;
  191. }
  192. // 生成sql
  193. private string ToSql(string subtable, int page, int count, int query, string json)
  194. {
  195. var values = JObject.Parse(json);
  196. page = values["page"] == null ? page : int.Parse(values["page"].ToString());
  197. count = values["count"] == null ? count : int.Parse(values["count"].ToString());
  198. _ = values["query"] == null ? query : int.Parse(values["query"].ToString());
  199. values.Remove("page");
  200. values.Remove("count");
  201. subtable = _tableMapper.GetTableName(subtable);
  202. var tb = SugarQueryable(subtable, "*", values, null);
  203. var sqlObj = tb.Skip((page - 1) * count).Take(10).ToSql();
  204. return sqlObj.Key;
  205. }
  206. /// <summary>
  207. /// 查询第一条数据
  208. /// </summary>
  209. /// <param name="subtable"></param>
  210. /// <param name="json"></param>
  211. /// <param name="job"></param>
  212. /// <returns></returns>
  213. /// <exception cref="Exception"></exception>
  214. private dynamic GetFirstData(string subtable, string json, JObject job)
  215. {
  216. var role = _identitySvc.GetSelectRole(subtable);
  217. if (!role.Item1)
  218. throw new Exception(role.Item2);
  219. var selectrole = role.Item2;
  220. subtable = _tableMapper.GetTableName(subtable);
  221. var values = JObject.Parse(json);
  222. values.Remove("page");
  223. values.Remove("count");
  224. var tb = SugarQueryable(subtable, selectrole, values, job).First();
  225. var dic = (IDictionary<string, object>)tb;
  226. foreach (var item in values.Properties().Where(it => it.Name.EndsWith("()")))
  227. {
  228. if (item.Value.IsNullOrEmpty())
  229. {
  230. var func = item.Value.ToString().Substring(0, item.Value.ToString().IndexOf("("));
  231. var param = item.Value.ToString().Substring(item.Value.ToString().IndexOf("(") + 1).TrimEnd(')');
  232. var types = new List<Type>();
  233. var paramss = new List<object>();
  234. foreach (var va in param.Split(','))
  235. {
  236. types.Add(typeof(object));
  237. paramss.Add(tb.Where(it => it.Key.Equals(va)).Select(i => i.Value));
  238. }
  239. dic[item.Name] = ExecFunc(func, paramss.ToArray(), types.ToArray());
  240. }
  241. }
  242. return tb;
  243. }
  244. // 单表查询,返回的数据在指定的NodeName节点
  245. private int QuerySingleList(JObject resultObj, KeyValuePair<string, JToken> item, string nodeName)
  246. {
  247. var key = item.Key.Trim();
  248. var jb = JObject.Parse(item.Value.ToString());
  249. int page = jb["page"] == null ? 0 : int.Parse(jb["page"].ToString());
  250. int count = jb["count"] == null ? 10 : int.Parse(jb["count"].ToString());
  251. int query = jb["query"] == null ? 2 : int.Parse(jb["query"].ToString()); // 默认输出数据和数量
  252. int total = 0;
  253. jb.Remove("page"); jb.Remove("count"); jb.Remove("query");
  254. var htt = new JArray();
  255. foreach (var t in jb)
  256. {
  257. var datas = GetTableData(t.Key, page, count, query, t.Value.ToString(), null);
  258. if (query > 0)
  259. total = datas.Item2;
  260. foreach (var data in datas.Item1)
  261. {
  262. htt.Add(JToken.FromObject(data));
  263. }
  264. }
  265. if (!string.IsNullOrEmpty(nodeName))
  266. resultObj.Add(nodeName, htt);
  267. else
  268. resultObj.Add(key, htt);
  269. return total;
  270. }
  271. // 生成sql
  272. private string ToSql(KeyValuePair<string, JToken> item)
  273. {
  274. var jb = JObject.Parse(item.Value.ToString());
  275. int page = jb["page"] == null ? 0 : int.Parse(jb["page"].ToString());
  276. int count = jb["count"] == null ? 10 : int.Parse(jb["count"].ToString());
  277. int query = jb["query"] == null ? 2 : int.Parse(jb["query"].ToString()); // 默认输出数据和数量
  278. jb.Remove("page"); jb.Remove("count"); jb.Remove("query");
  279. foreach (var t in jb)
  280. {
  281. return ToSql(t.Key, page, count, query, t.Value.ToString());
  282. }
  283. return string.Empty;
  284. }
  285. // 单表查询
  286. private int QuerySingleList(JObject resultObj, KeyValuePair<string, JToken> item)
  287. {
  288. var key = item.Key.TrimEnd("[]");
  289. return QuerySingleList(resultObj, item, key);
  290. }
  291. /// <summary>
  292. /// 多列表查询
  293. /// </summary>
  294. /// <param name="resultObj"></param>
  295. /// <param name="item"></param>
  296. /// <returns></returns>
  297. private int QueryMoreList(JObject resultObj, KeyValuePair<string, JToken> item)
  298. {
  299. int total = 0;
  300. var jb = JObject.Parse(item.Value.ToString());
  301. var page = jb["page"] == null ? 0 : int.Parse(jb["page"].ToString());
  302. var count = jb["count"] == null ? 10 : int.Parse(jb["count"].ToString());
  303. var query = jb["query"] == null ? 2 : int.Parse(jb["query"].ToString()); // 默认输出数据和数量
  304. jb.Remove("page"); jb.Remove("count"); jb.Remove("query");
  305. var htt = new JArray();
  306. List<string> tables = new List<string>(), where = new List<string>();
  307. foreach (var t in jb)
  308. {
  309. tables.Add(t.Key); where.Add(t.Value.ToString());
  310. }
  311. if (tables.Count > 0)
  312. {
  313. string table = tables[0].TrimEnd("[]");
  314. var temp = GetTableData(table, page, count, query, where[0], null);
  315. if (query > 0)
  316. total = temp.Item2;
  317. // 关联查询,先查子表数据,再根据外键循环查询主表
  318. foreach (var dd in temp.Item1)
  319. {
  320. var zht = new JObject
  321. {
  322. { table, JToken.FromObject(dd) }
  323. };
  324. for (int i = 1; i < tables.Count; i++) // 从第二个表开始循环
  325. {
  326. string subtable = tables[i];
  327. // 有bug,暂不支持[]分支
  328. //if (subtable.EndsWith("[]"))
  329. //{
  330. // string tableName = subtable.TrimEnd("[]".ToCharArray());
  331. // var jbb = JObject.Parse(where[i]);
  332. // page = jbb["page"] == null ? 0 : int.Parse(jbb["page"].ToString());
  333. // count = jbb["count"] == null ? 0 : int.Parse(jbb["count"].ToString());
  334. // var lt = new JArray();
  335. // foreach (var d in GetTableData(tableName, page, count, query, item.Value[subtable].ToString(), zht).Item1)
  336. // {
  337. // lt.Add(JToken.FromObject(d));
  338. // }
  339. // zht.Add(tables[i], lt);
  340. //}
  341. //else
  342. //{
  343. var ddf = GetFirstData(subtable, where[i].ToString(), zht);
  344. if (ddf != null)
  345. zht.Add(subtable, JToken.FromObject(ddf));
  346. }
  347. htt.Add(zht);
  348. }
  349. }
  350. if (query != 1)
  351. resultObj.Add("[]", htt);
  352. // 分页自动添加当前页数和数量
  353. if (page > 0 && count > 0)
  354. {
  355. resultObj.Add("page", page);
  356. resultObj.Add("count", count);
  357. resultObj.Add("max", (int)Math.Ceiling((decimal)total / count));
  358. }
  359. return total;
  360. }
  361. // 执行方法
  362. private void ExecFunc(JObject resultObj, KeyValuePair<string, JToken> item)
  363. {
  364. var jb = JObject.Parse(item.Value.ToString());
  365. var dataJObj = new JObject();
  366. foreach (var f in jb)
  367. {
  368. var types = new List<Type>();
  369. var param = new List<object>();
  370. foreach (var va in JArray.Parse(f.Value.ToString()))
  371. {
  372. types.Add(typeof(object));
  373. param.Add(va);
  374. }
  375. dataJObj.Add(f.Key, JToken.FromObject(ExecFunc(f.Key, param.ToArray(), types.ToArray())));
  376. }
  377. resultObj.Add("func", dataJObj);
  378. }
  379. /// <summary>
  380. /// 构造查询过程
  381. /// </summary>
  382. /// <param name="subtable"></param>
  383. /// <param name="selectrole"></param>
  384. /// <param name="values"></param>
  385. /// <param name="dd"></param>
  386. /// <returns></returns>
  387. private ISugarQueryable<ExpandoObject> SugarQueryable(string subtable, string selectrole, JObject values, JObject dd)
  388. {
  389. IsTable(subtable);
  390. var tb = _db.Queryable(subtable, "tb");
  391. // select
  392. if (!values["@column"].IsNullOrEmpty())
  393. {
  394. ProcessColumn(subtable, selectrole, values, tb);
  395. }
  396. else
  397. {
  398. tb.Select(selectrole);
  399. }
  400. // 前几行
  401. ProcessLimit(values, tb);
  402. // where
  403. ProcessWhere(subtable, values, tb, dd);
  404. // 排序
  405. ProcessOrder(subtable, values, tb);
  406. // 分组
  407. PrccessGroup(subtable, values, tb);
  408. // Having
  409. ProcessHaving(values, tb);
  410. return tb;
  411. }
  412. // 处理字段重命名 "@column":"toId:parentId",对应SQL是toId AS parentId,将查询的字段toId变为parentId返回
  413. private void ProcessColumn(string subtable, string selectrole, JObject values, ISugarQueryable<ExpandoObject> tb)
  414. {
  415. var str = new System.Text.StringBuilder(100);
  416. foreach (var item in values["@column"].ToString().Split(','))
  417. {
  418. var ziduan = item.Split(':');
  419. var colName = ziduan[0];
  420. var ma = new Regex(@"\((\w+)\)").Match(colName);
  421. // 处理max、min这样的函数
  422. if (ma.Success && ma.Groups.Count > 1)
  423. colName = ma.Groups[1].Value;
  424. // 判断列表是否有权限 sum(1)、sum(*)、Count(1)这样的值直接有效
  425. if (colName == "*" || int.TryParse(colName, out int colNumber) || (IsCol(subtable, colName) && _identitySvc.ColIsRole(colName, selectrole.Split(','))))
  426. {
  427. if (ziduan.Length > 1)
  428. {
  429. if (ziduan[1].Length > 20)
  430. throw new Exception("别名不能超过20个字符");
  431. str.Append(ziduan[0] + " as `" + ReplaceSQLChar(ziduan[1]) + "`,");
  432. }
  433. // 不对函数加``,解决sum(*)、Count(1)等不能使用的问题
  434. else if (ziduan[0].Contains('('))
  435. {
  436. str.Append(ziduan[0] + ",");
  437. }
  438. else
  439. str.Append("`" + ziduan[0] + "`" + ",");
  440. }
  441. }
  442. if (string.IsNullOrEmpty(str.ToString()))
  443. throw new Exception($"表名{subtable}没有可查询的字段!");
  444. tb.Select(str.ToString().TrimEnd(','));
  445. }
  446. /// <summary>
  447. /// 构造查询条件 where
  448. /// </summary>
  449. /// <param name="subtable"></param>
  450. /// <param name="values"></param>
  451. /// <param name="tb"></param>
  452. /// <param name="dd"></param>
  453. private void ProcessWhere(string subtable, JObject values, ISugarQueryable<ExpandoObject> tb, JObject dd)
  454. {
  455. var conModels = new List<IConditionalModel>();
  456. if (!values["identity"].IsNullOrEmpty())
  457. conModels.Add(new ConditionalModel() { FieldName = values["identity"].ToString(), ConditionalType = ConditionalType.Equal, FieldValue = _identitySvc.GetUserIdentity() });
  458. foreach (var va in values)
  459. {
  460. string key = va.Key.Trim();
  461. string fieldValue = va.Value.ToString();
  462. if (key.StartsWith("@"))
  463. {
  464. continue;
  465. }
  466. if (key.EndsWith("$")) // 模糊查询
  467. {
  468. FuzzyQuery(subtable, conModels, va);
  469. }
  470. else if (key.EndsWith("{}")) // 逻辑运算
  471. {
  472. ConditionQuery(subtable, conModels, va);
  473. }
  474. else if (key.EndsWith("%")) // bwtween查询
  475. {
  476. ConditionBetween(subtable, conModels, va, tb);
  477. }
  478. else if (key.EndsWith("@")) // 关联上一个table
  479. {
  480. if (dd == null)
  481. continue;
  482. var str = fieldValue.Split('/');
  483. var lastTableRecord = ((JObject)dd[str[^2]]);
  484. if (!lastTableRecord.ContainsKey(str[^1]))
  485. throw new Exception($"找不到关联列:{str},请在{str[^2]}@column中设置");
  486. var value = lastTableRecord[str[^1]].ToString();
  487. conModels.Add(new ConditionalModel() { FieldName = key.TrimEnd('@'), ConditionalType = ConditionalType.Equal, FieldValue = value });
  488. }
  489. else if (key.EndsWith("~")) // 不等于(应该是正则匹配)
  490. {
  491. //conModels.Add(new ConditionalModel() { FieldName = key.TrimEnd('~'), ConditionalType = ConditionalType.NoEqual, FieldValue = fieldValue });
  492. }
  493. else if (IsCol(subtable, key.TrimEnd('!'))) // 其他where条件
  494. {
  495. ConditionEqual(subtable, conModels, va);
  496. }
  497. }
  498. if (conModels.Any())
  499. tb.Where(conModels);
  500. }
  501. // "@having":"function0(...)?value0;function1(...)?value1;function2(...)?value2...",
  502. // SQL函数条件,一般和 @group一起用,函数一般在 @column里声明
  503. private static void ProcessHaving(JObject values, ISugarQueryable<ExpandoObject> tb)
  504. {
  505. if (!values["@having"].IsNullOrEmpty())
  506. {
  507. var hw = new List<IConditionalModel>();
  508. var havingItems = new List<string>();
  509. if (values["@having"].HasValues)
  510. {
  511. havingItems = values["@having"].Select(p => p.ToString()).ToList();
  512. }
  513. else
  514. {
  515. havingItems.Add(values["@having"].ToString());
  516. }
  517. foreach (var item in havingItems)
  518. {
  519. var and = item.ToString();
  520. var model = new ConditionalModel();
  521. if (and.Contains(">="))
  522. {
  523. model.FieldName = and.Split(new string[] { ">=" }, StringSplitOptions.RemoveEmptyEntries)[0];
  524. model.ConditionalType = ConditionalType.GreaterThanOrEqual;
  525. model.FieldValue = and.Split(new string[] { ">=" }, StringSplitOptions.RemoveEmptyEntries)[1];
  526. }
  527. else if (and.Contains("<="))
  528. {
  529. model.FieldName = and.Split(new string[] { "<=" }, StringSplitOptions.RemoveEmptyEntries)[0];
  530. model.ConditionalType = ConditionalType.LessThanOrEqual;
  531. model.FieldValue = and.Split(new string[] { "<=" }, StringSplitOptions.RemoveEmptyEntries)[1];
  532. }
  533. else if (and.Contains('>'))
  534. {
  535. model.FieldName = and.Split(new string[] { ">" }, StringSplitOptions.RemoveEmptyEntries)[0];
  536. model.ConditionalType = ConditionalType.GreaterThan;
  537. model.FieldValue = and.Split(new string[] { ">" }, StringSplitOptions.RemoveEmptyEntries)[1];
  538. }
  539. else if (and.Contains('<'))
  540. {
  541. model.FieldName = and.Split(new string[] { "<" }, StringSplitOptions.RemoveEmptyEntries)[0];
  542. model.ConditionalType = ConditionalType.LessThan;
  543. model.FieldValue = and.Split(new string[] { "<" }, StringSplitOptions.RemoveEmptyEntries)[1];
  544. }
  545. else if (and.Contains("!="))
  546. {
  547. model.FieldName = and.Split(new string[] { "!=" }, StringSplitOptions.RemoveEmptyEntries)[0];
  548. model.ConditionalType = ConditionalType.NoEqual;
  549. model.FieldValue = and.Split(new string[] { "!=" }, StringSplitOptions.RemoveEmptyEntries)[1];
  550. }
  551. else if (and.Contains('='))
  552. {
  553. model.FieldName = and.Split(new string[] { "=" }, StringSplitOptions.RemoveEmptyEntries)[0];
  554. model.ConditionalType = ConditionalType.Equal;
  555. model.FieldValue = and.Split(new string[] { "=" }, StringSplitOptions.RemoveEmptyEntries)[1];
  556. }
  557. hw.Add(model);
  558. }
  559. //var d = db.Context.Utilities.ConditionalModelToSql(hw);
  560. //tb.Having(d.Key, d.Value);
  561. tb.Having(string.Join(",", havingItems));
  562. }
  563. }
  564. // "@group":"column0,column1...",分组方式。如果 @column里声明了Table的id,则id也必须在 @group中声明;其它情况下必须满足至少一个条件:
  565. // 1.分组的key在 @column里声明
  566. // 2.Table主键在 @group中声明
  567. private void PrccessGroup(string subtable, JObject values, ISugarQueryable<ExpandoObject> tb)
  568. {
  569. if (!values["@group"].IsNullOrEmpty())
  570. {
  571. var groupList = new List<GroupByModel>(); // 多库兼容写法
  572. foreach (var col in values["@group"].ToString().Split(','))
  573. {
  574. if (IsCol(subtable, col))
  575. {
  576. // str.Append(and + ",");
  577. groupList.Add(new GroupByModel() { FieldName = col });
  578. }
  579. }
  580. if (groupList.Any())
  581. tb.GroupBy(groupList);
  582. }
  583. }
  584. // 处理排序 "@order":"name-,id"查询按 name降序、id默认顺序 排序的User数组
  585. private void ProcessOrder(string subtable, JObject values, ISugarQueryable<ExpandoObject> tb)
  586. {
  587. if (!values["@order"].IsNullOrEmpty())
  588. {
  589. var orderList = new List<OrderByModel>(); // 多库兼容写法
  590. foreach (var item in values["@order"].ToString().Split(','))
  591. {
  592. string col = item.Replace("-", "").Replace("+", "").Replace(" desc", "").Replace(" asc", ""); // 增加对原生排序的支持
  593. if (IsCol(subtable, col))
  594. {
  595. orderList.Add(new OrderByModel()
  596. {
  597. FieldName = col,
  598. OrderByType = item.EndsWith("-") || item.EndsWith(" desc") ? OrderByType.Desc : OrderByType.Asc
  599. });
  600. }
  601. }
  602. if (orderList.Any())
  603. tb.OrderBy(orderList);
  604. }
  605. }
  606. /// <summary>
  607. /// 表内参数"@count"(int):查询前几行,不能同时使用count和@count函数
  608. /// </summary>
  609. /// <param name="values"></param>
  610. /// <param name="tb"></param>
  611. private static void ProcessLimit(JObject values, ISugarQueryable<ExpandoObject> tb)
  612. {
  613. if (!values["@count"].IsNullOrEmpty())
  614. {
  615. int c = values["@count"].ToObject<int>();
  616. tb.Take(c);
  617. }
  618. }
  619. // 条件查询 "key{}":"条件0,条件1...",条件为任意SQL比较表达式字符串,非Number类型必须用''包含条件的值,如'a'
  620. // &, |, ! 逻辑运算符,对应数据库 SQL 中的 AND, OR, NOT。
  621. // 横或纵与:同一字段的值内条件默认 | 或连接,不同字段的条件默认 & 与连接。
  622. // ① & 可用于"key&{}":"条件"等
  623. // ② | 可用于"key|{}":"条件", "key|{}":[] 等,一般可省略
  624. // ③ ! 可单独使用,如"key!":Object,也可像&,|一样配合其他功能符使用
  625. private void ConditionQuery(string subtable, List<IConditionalModel> conModels, KeyValuePair<string, JToken> va)
  626. {
  627. var vakey = va.Key.Trim();
  628. var field = vakey.TrimEnd("{}".ToCharArray());
  629. var columnName = field.TrimEnd(new char[] { '&', '|' });
  630. IsCol(subtable, columnName);
  631. var ddt = new List<KeyValuePair<WhereType, ConditionalModel>>();
  632. foreach (var and in va.Value.ToString().Split(','))
  633. {
  634. var model = new ConditionalModel
  635. {
  636. FieldName = columnName
  637. };
  638. if (and.StartsWith(">="))
  639. {
  640. model.ConditionalType = ConditionalType.GreaterThanOrEqual;
  641. model.FieldValue = and.TrimStart(">=".ToCharArray());
  642. }
  643. else if (and.StartsWith("<="))
  644. {
  645. model.ConditionalType = ConditionalType.LessThanOrEqual;
  646. model.FieldValue = and.TrimStart("<=".ToCharArray());
  647. }
  648. else if (and.StartsWith(">"))
  649. {
  650. model.ConditionalType = ConditionalType.GreaterThan;
  651. model.FieldValue = and.TrimStart('>');
  652. }
  653. else if (and.StartsWith("<"))
  654. {
  655. model.ConditionalType = ConditionalType.LessThan;
  656. model.FieldValue = and.TrimStart('<');
  657. }
  658. model.CSharpTypeName = FuncList.GetValueCSharpType(model.FieldValue);
  659. ddt.Add(new KeyValuePair<WhereType, ConditionalModel>(field.EndsWith("!") ? WhereType.Or : WhereType.And, model));
  660. }
  661. conModels.Add(new ConditionalCollections() { ConditionalList = ddt });
  662. }
  663. /// <summary>
  664. /// "key%":"start,end" => "key%":["start,end"],其中 start 和 end 都只能为 Boolean, Number, String 中的一种,如 "2017-01-01,2019-01-01" ,["1,90000", "82001,100000"] ,可用于连续范围内的筛选
  665. /// 目前不支持数组形式
  666. /// </summary>
  667. /// <param name="subtable"></param>
  668. /// <param name="conModels"></param>
  669. /// <param name="va"></param>
  670. /// <param name="tb"></param>
  671. private static void ConditionBetween(string subtable, List<IConditionalModel> conModels, KeyValuePair<string, JToken> va, ISugarQueryable<ExpandoObject> tb)
  672. {
  673. var vakey = va.Key.Trim();
  674. var field = vakey.TrimEnd("%".ToCharArray());
  675. var inValues = new List<string>();
  676. if (va.Value.HasValues)
  677. {
  678. foreach (var cm in va.Value)
  679. {
  680. inValues.Add(cm.ToString());
  681. }
  682. }
  683. else
  684. {
  685. inValues.Add(va.Value.ToString());
  686. }
  687. for (var i = 0; i < inValues.Count; i++)
  688. {
  689. var fileds = inValues[i].Split(',');
  690. if (fileds.Length == 2)
  691. {
  692. var type = FuncList.GetValueCSharpType(fileds[0]);
  693. ObjectFuncModel f = ObjectFuncModel.Create("between", field, $"{{{type}}}:{fileds[0]}", $"{{{type}}}:{fileds[1]}");
  694. tb.Where(f);
  695. }
  696. }
  697. }
  698. /// <summary>
  699. /// 等于、不等于、in 、not in
  700. /// </summary>
  701. /// <param name="subtable"></param>
  702. /// <param name="conModels"></param>
  703. /// <param name="va"></param>
  704. private void ConditionEqual(string subtable, List<IConditionalModel> conModels, KeyValuePair<string, JToken> va)
  705. {
  706. var key = va.Key;
  707. var fieldValue = va.Value.ToString();
  708. // in / not in
  709. if (va.Value is JArray)
  710. {
  711. conModels.Add(new ConditionalModel()
  712. {
  713. FieldName = key.TrimEnd('!'),
  714. ConditionalType = key.EndsWith("!") ? ConditionalType.NotIn : ConditionalType.In,
  715. FieldValue = va.Value.ToObject<string[]>().Aggregate((a, b) => a + "," + b)
  716. });
  717. }
  718. else
  719. {
  720. if (string.IsNullOrEmpty(fieldValue))
  721. {
  722. // is not null or ''
  723. if (key.EndsWith("!"))
  724. {
  725. conModels.Add(new ConditionalModel() { FieldName = key.TrimEnd('!'), ConditionalType = ConditionalType.IsNot, FieldValue = null });
  726. conModels.Add(new ConditionalModel() { FieldName = key.TrimEnd('!'), ConditionalType = ConditionalType.IsNot, FieldValue = "" });
  727. }
  728. //is null or ''
  729. else
  730. {
  731. conModels.Add(new ConditionalModel() { FieldName = key.TrimEnd('!'), FieldValue = null });
  732. }
  733. }
  734. // = / !=
  735. else
  736. {
  737. conModels.Add(new ConditionalModel()
  738. {
  739. FieldName = key.TrimEnd('!'),
  740. ConditionalType = key.EndsWith("!") ? ConditionalType.NoEqual : ConditionalType.Equal,
  741. FieldValue = fieldValue
  742. });
  743. }
  744. }
  745. }
  746. // 模糊搜索 "key$":"SQL搜索表达式" => "key$":["SQL搜索表达式"],任意SQL搜索表达式字符串,如 %key%(包含key), key%(以key开始), %k%e%y%(包含字母k,e,y) 等,%表示任意字符
  747. private void FuzzyQuery(string subtable, List<IConditionalModel> conModels, KeyValuePair<string, JToken> va)
  748. {
  749. var vakey = va.Key.Trim();
  750. var fieldValue = va.Value.ToString();
  751. var conditionalType = ConditionalType.Like;
  752. if (IsCol(subtable, vakey.TrimEnd('$')))
  753. {
  754. // 支持三种like查询
  755. if (fieldValue.StartsWith("%") && fieldValue.EndsWith("%"))
  756. {
  757. conditionalType = ConditionalType.Like;
  758. }
  759. else if (fieldValue.StartsWith("%"))
  760. {
  761. conditionalType = ConditionalType.LikeRight;
  762. }
  763. else if (fieldValue.EndsWith("%"))
  764. {
  765. conditionalType = ConditionalType.LikeLeft;
  766. }
  767. conModels.Add(new ConditionalModel() { FieldName = vakey.TrimEnd('$'), ConditionalType = conditionalType, FieldValue = fieldValue.TrimEnd("%".ToArray()).TrimStart("%".ToArray()) });
  768. }
  769. }
  770. // 处理sql注入
  771. private string ReplaceSQLChar(string str)
  772. {
  773. if (string.IsNullOrWhiteSpace(str))
  774. return string.Empty;
  775. str = str.Replace("'", "");
  776. str = str.Replace(";", "");
  777. str = str.Replace(",", "");
  778. str = str.Replace("?", "");
  779. str = str.Replace("<", "");
  780. str = str.Replace(">", "");
  781. str = str.Replace("(", "");
  782. str = str.Replace(")", "");
  783. str = str.Replace("@", "");
  784. str = str.Replace("=", "");
  785. str = str.Replace("+", "");
  786. str = str.Replace("*", "");
  787. str = str.Replace("&", "");
  788. str = str.Replace("#", "");
  789. str = str.Replace("%", "");
  790. str = str.Replace("$", "");
  791. str = str.Replace("\"", "");
  792. // 删除与数据库相关的词
  793. str = Regex.Replace(str, "delete from", "", RegexOptions.IgnoreCase);
  794. str = Regex.Replace(str, "drop table", "", RegexOptions.IgnoreCase);
  795. str = Regex.Replace(str, "truncate", "", RegexOptions.IgnoreCase);
  796. str = Regex.Replace(str, "xp_cmdshell", "", RegexOptions.IgnoreCase);
  797. str = Regex.Replace(str, "exec master", "", RegexOptions.IgnoreCase);
  798. str = Regex.Replace(str, "net localgroup administrators", "", RegexOptions.IgnoreCase);
  799. str = Regex.Replace(str, "net user", "", RegexOptions.IgnoreCase);
  800. str = Regex.Replace(str, "-", "", RegexOptions.IgnoreCase);
  801. str = Regex.Replace(str, "truncate", "", RegexOptions.IgnoreCase);
  802. return str;
  803. }
  804. /// <summary>
  805. /// 单条插入
  806. /// </summary>
  807. /// <param name="tableName"></param>
  808. /// <param name="cols"></param>
  809. /// <param name="role"></param>
  810. /// <returns>(各种类型的)id</returns>
  811. public object InsertSingle(string tableName, JObject cols, APIJSON_Role role = null)
  812. {
  813. role ??= _identitySvc.GetRole();
  814. var dt = new Dictionary<string, object>();
  815. foreach (var f in cols) // 遍历字段
  816. {
  817. if (//f.Key.ToLower() != "id" && //是否一定要传id
  818. IsCol(tableName, f.Key) &&
  819. (role.Insert.Column.Contains("*") || role.Insert.Column.Contains(f.Key, StringComparer.CurrentCultureIgnoreCase)))
  820. dt.Add(f.Key, FuncList.TransJObjectToSugarPara(f.Value));
  821. }
  822. // 如果外部没传Id,就后端生成或使用数据库默认值,如果都没有会出错
  823. object id;
  824. if (!dt.ContainsKey("id"))
  825. {
  826. id = YitIdHelper.NextId();//自己生成id的方法,可以由外部传入
  827. dt.Add("id", id);
  828. }
  829. else
  830. {
  831. id = dt["id"];
  832. }
  833. _db.Insertable(dt).AS(tableName).ExecuteCommand();//根据主键类型设置返回雪花或自增,目前返回条数
  834. return id;
  835. }
  836. /// <summary>
  837. /// 为每天记录创建udpate sql
  838. /// </summary>
  839. /// <param name="tableName"></param>
  840. /// <param name="record"></param>
  841. /// <param name="role"></param>
  842. /// <returns></returns>
  843. public int UpdateSingleRecord(string tableName, JObject record, APIJSON_Role role = null)
  844. {
  845. role ??= _identitySvc.GetRole();
  846. if (!record.ContainsKey("id"))
  847. throw Oops.Bah("未传主键id");
  848. var dt = new Dictionary<string, object>();
  849. var sb = new StringBuilder(100);
  850. object id = null;
  851. foreach (var f in record)//遍历每个字段
  852. {
  853. if (f.Key.Equals("id", StringComparison.OrdinalIgnoreCase))
  854. {
  855. if (f.Value is JArray)
  856. {
  857. sb.Append($"{f.Key} in (@{f.Key})");
  858. id = FuncList.TransJArrayToSugarPara(f.Value);
  859. }
  860. else
  861. {
  862. sb.Append($"{f.Key}=@{f.Key}");
  863. id = FuncList.TransJObjectToSugarPara(f.Value);
  864. }
  865. }
  866. else if (IsCol(tableName, f.Key) && (role.Update.Column.Contains("*") || role.Update.Column.Contains(f.Key, StringComparer.CurrentCultureIgnoreCase)))
  867. {
  868. dt.Add(f.Key, FuncList.TransJObjectToSugarPara(f.Value));
  869. }
  870. }
  871. string whereSql = sb.ToString();
  872. int count = _db.Updateable(dt).AS(tableName).Where(whereSql, new { id }).ExecuteCommand();
  873. return count;
  874. }
  875. /// <summary>
  876. /// 更新单表,支持同表多条记录
  877. /// </summary>
  878. /// <param name="tableName"></param>
  879. /// <param name="records"></param>
  880. /// <param name="role"></param>
  881. /// <returns></returns>
  882. public int UpdateSingleTable(string tableName, JToken records, APIJSON_Role role = null)
  883. {
  884. role ??= _identitySvc.GetRole();
  885. int count = 0;
  886. if (records is JArray)
  887. {
  888. foreach (var record in records.ToObject<JObject[]>())
  889. {
  890. count += UpdateSingleRecord(tableName, record, role);
  891. }
  892. }
  893. else
  894. {
  895. count = UpdateSingleRecord(tableName, records.ToObject<JObject>(), role);
  896. }
  897. return count;
  898. }
  899. }