Function DetectSQLInjectionCache

internal/waf/injectionutils/utils_sqli.go:24–49

DetectSQLInjectionCache detect sql injection in string with cache

(input string, isStrict bool, cacheLife utils.CacheLife)

// DetectSQLInjectionCache detect sql injection in string with cache
func DetectSQLInjectionCache(input string, isStrict bool, cacheLife utils.CacheLife) bool {
	var l = len(input)

	if l == 0 {
		return false
	}

	if cacheLife <= 0 || l < 128 || l > utils.MaxCacheDataSize {
		return DetectSQLInjection(input, isStrict)
	}

	var hash = xxhash.Sum64String(input)
	var key = "WAF@SQLI@" + strconv.FormatUint(hash, 10)
	var item = utils.SharedCache.Read(key)
	if item != nil {
		return item.Value == 1
	}

	var result = DetectSQLInjection(input, isStrict)
	if result {
		utils.SharedCache.Write(key, 1, fasttime.Now().Unix()+cacheLife)
	} else {
		utils.SharedCache.Write(key, 0, fasttime.Now().Unix()+cacheLife)
	}
	return result
}

// DetectSQLInjection detect sql injection in string
func DetectSQLInjection(input string, isStrict bool) bool {