android.database.DatabaseUtils#appendEscapedSQLString ( )源码实例Demo

下面列出了android.database.DatabaseUtils#appendEscapedSQLString ( ) 实例代码，或者点击链接到github查看源代码，也可以在右侧发表评论。

源代码1 项目： Pix-Art-Messenger 文件： ExportBackupService.java

private static void appendValues(final Cursor cursor, final StringBuilder builder, final int skipColumn) {
    builder.append("(");
    for (int i = 0; i < cursor.getColumnCount(); ++i) {
        if (i == skipColumn) {
            continue;
        }
        if (i != 0) {
            builder.append(',');
        }
        final String value = cursor.getString(i);
        if (value == null) {
            builder.append("NULL");
        } else if (value.matches("[0-9]+")) {
            builder.append(value);
        } else {
            DatabaseUtils.appendEscapedSQLString(builder, value);
        }
    }
    builder.append(")");
}

源代码2 项目： Conversations 文件： ExportBackupService.java

private static void appendValues(final Cursor cursor, final StringBuilder builder, final int skipColumn) {
    builder.append("(");
    for (int i = 0; i < cursor.getColumnCount(); ++i) {
        if (i == skipColumn) {
            continue;
        }
        if (i != 0) {
            builder.append(',');
        }
        final String value = cursor.getString(i);
        if (value == null) {
            builder.append("NULL");
        } else if (value.matches("[0-9]+")) {
            builder.append(value);
        } else {
            DatabaseUtils.appendEscapedSQLString(builder, value);
        }
    }
    builder.append(")");

}

源代码3 项目： android_9.0.0_r45 文件： Browser.java

private static final Cursor getVisitedLike(ContentResolver cr, String url) {
    boolean secure = false;
    String compareString = url;
    if (compareString.startsWith("http://")) {
        compareString = compareString.substring(7);
    } else if (compareString.startsWith("https://")) {
        compareString = compareString.substring(8);
        secure = true;
    }
    if (compareString.startsWith("www.")) {
        compareString = compareString.substring(4);
    }
    StringBuilder whereClause = null;
    if (secure) {
        whereClause = new StringBuilder(Bookmarks.URL + " = ");
        DatabaseUtils.appendEscapedSQLString(whereClause,
                "https://" + compareString);
        addOrUrlEquals(whereClause);
        DatabaseUtils.appendEscapedSQLString(whereClause,
                "https://www." + compareString);
    } else {
        whereClause = new StringBuilder(Bookmarks.URL + " = ");
        DatabaseUtils.appendEscapedSQLString(whereClause,
                compareString);
        addOrUrlEquals(whereClause);
        String wwwString = "www." + compareString;
        DatabaseUtils.appendEscapedSQLString(whereClause,
                wwwString);
        addOrUrlEquals(whereClause);
        DatabaseUtils.appendEscapedSQLString(whereClause,
                "http://" + compareString);
        addOrUrlEquals(whereClause);
        DatabaseUtils.appendEscapedSQLString(whereClause,
                "http://" + wwwString);
    }
    return cr.query(History.CONTENT_URI, new String[] { History._ID, History.VISITS },
            whereClause.toString(), null, null);
}

源代码4 项目： Pix-Art-Messenger 文件： ExportBackupService.java

private static void accountExport(final SQLiteDatabase db, final String uuid, final PrintWriter writer) {
    final StringBuilder builder = new StringBuilder();
    final Cursor accountCursor = db.query(Account.TABLENAME, null, Account.UUID + "=?", new String[]{uuid}, null, null, null);
    while (accountCursor != null && accountCursor.moveToNext()) {
        builder.append("INSERT INTO ").append(Account.TABLENAME).append("(");
        for (int i = 0; i < accountCursor.getColumnCount(); ++i) {
            if (i != 0) {
                builder.append(',');
            }
            builder.append(accountCursor.getColumnName(i));
        }
        builder.append(") VALUES(");
        for (int i = 0; i < accountCursor.getColumnCount(); ++i) {
            if (i != 0) {
                builder.append(',');
            }
            final String value = accountCursor.getString(i);
            if (value == null || Account.ROSTERVERSION.equals(accountCursor.getColumnName(i))) {
                builder.append("NULL");
            } else if (value.matches("\\d+")) {
                int intValue = Integer.parseInt(value);
                if (Account.OPTIONS.equals(accountCursor.getColumnName(i))) {
                    intValue |= 1 << Account.OPTION_DISABLED;
                }
                builder.append(intValue);
            } else {
                DatabaseUtils.appendEscapedSQLString(builder, value);
            }
        }
        builder.append(")");
        builder.append(';');
        builder.append('\n');
    }
    if (accountCursor != null) {
        accountCursor.close();
    }
    writer.append(builder.toString());
}

源代码5 项目： android-testdpc 文件： PreferenceIndexSqliteOpenHelper.java

private String buildLookupSQL(List<String> targetFragments) {
    StringBuilder stringBuilder = new StringBuilder(LOOKUP_SQL);
    for (String fragment : targetFragments) {
        DatabaseUtils.appendEscapedSQLString(stringBuilder, fragment);
        stringBuilder.append(",");
    }
    stringBuilder.setLength(stringBuilder.length() - 1); // Strip the last comma
    stringBuilder.append(")");
    return stringBuilder.toString();
}

源代码6 项目： AntennaPodSP 文件： PodDBAdapter.java

/**
 * Uses DatabaseUtils to escape a search query and removes ' at the
 * beginning and the end of the string returned by the escape method.
 */
private String prepareSearchQuery(String query) {
    StringBuilder builder = new StringBuilder();
    DatabaseUtils.appendEscapedSQLString(builder, query);
    builder.deleteCharAt(0);
    builder.deleteCharAt(builder.length() - 1);
    return builder.toString();
}

源代码7 项目： Conversations 文件： ExportBackupService.java

private static void accountExport(final SQLiteDatabase db, final String uuid, final PrintWriter writer) {
    final StringBuilder builder = new StringBuilder();
    final Cursor accountCursor = db.query(Account.TABLENAME, null, Account.UUID + "=?", new String[]{uuid}, null, null, null);
    while (accountCursor != null && accountCursor.moveToNext()) {
        builder.append("INSERT INTO ").append(Account.TABLENAME).append("(");
        for (int i = 0; i < accountCursor.getColumnCount(); ++i) {
            if (i != 0) {
                builder.append(',');
            }
            builder.append(accountCursor.getColumnName(i));
        }
        builder.append(") VALUES(");
        for (int i = 0; i < accountCursor.getColumnCount(); ++i) {
            if (i != 0) {
                builder.append(',');
            }
            final String value = accountCursor.getString(i);
            if (value == null || Account.ROSTERVERSION.equals(accountCursor.getColumnName(i))) {
                builder.append("NULL");
            } else if (value.matches("\\d+")) {
                int intValue = Integer.parseInt(value);
                if (Account.OPTIONS.equals(accountCursor.getColumnName(i))) {
                    intValue |= 1 << Account.OPTION_DISABLED;
                }
                builder.append(intValue);
            } else {
                DatabaseUtils.appendEscapedSQLString(builder, value);
            }
        }
        builder.append(")");
        builder.append(';');
        builder.append('\n');
    }
    if (accountCursor != null) {
        accountCursor.close();
    }
    writer.append(builder.toString());
}

源代码8 项目： opentasks 文件： TaskProvider.java

/**
 * Append the selection of the account specified in <code>uri</code> to the {@link StringBuilder} <code>sb</code>.
 *
 * @param sb
 *         A {@link StringBuilder} that the selection is appended to.
 * @param uri
 *         A {@link Uri} that specifies an account.
 *
 * @return <code>sb</code>.
 */
protected StringBuilder selectAccount(StringBuilder sb, Uri uri)
{
    String accountName = getAccountName(uri);
    String accountType = getAccountType(uri);

    if (accountName != null || accountType != null)
    {

        if (accountName != null)
        {
            if (sb.length() > 0)
            {
                sb.append(" AND ");
            }

            sb.append(TaskListSyncColumns.ACCOUNT_NAME);
            sb.append("=");
            DatabaseUtils.appendEscapedSQLString(sb, accountName);
        }
        if (accountType != null)
        {

            if (sb.length() > 0)
            {
                sb.append(" AND ");
            }

            sb.append(TaskListSyncColumns.ACCOUNT_TYPE);
            sb.append("=");
            DatabaseUtils.appendEscapedSQLString(sb, accountType);
        }
    }
    return sb;
}

源代码9 项目： opentasks-provider 文件： TaskProvider.java

/**
 * Append the selection of the account specified in <code>uri</code> to the {@link StringBuilder} <code>sb</code>.
 * 
 * @param sb
 *            A {@link StringBuilder} that the selection is appended to.
 * @param uri
 *            A {@link Uri} that specifies an account.
 * @return <code>sb</code>.
 */
protected StringBuilder selectAccount(StringBuilder sb, Uri uri)
{
	String accountName = getAccountName(uri);
	String accountType = getAccountType(uri);

	if (accountName != null || accountType != null)
	{

		if (accountName != null)
		{
			if (sb.length() > 0)
			{
				sb.append(" AND ");
			}

			sb.append(TaskListSyncColumns.ACCOUNT_NAME);
			sb.append("=");
			DatabaseUtils.appendEscapedSQLString(sb, accountName);
		}
		if (accountType != null)
		{

			if (sb.length() > 0)
			{
				sb.append(" AND ");
			}

			sb.append(TaskListSyncColumns.ACCOUNT_TYPE);
			sb.append("=");
			DatabaseUtils.appendEscapedSQLString(sb, accountType);
		}
	}
	return sb;
}

源代码10 项目： android_9.0.0_r45 文件： SQLiteQueryBuilder.java

/**
 * Append a chunk to the WHERE clause of the query. All chunks appended are surrounded
 * by parenthesis and ANDed with the selection passed to {@link #query}. The final
 * WHERE clause looks like:
 *
 * WHERE (&lt;append chunk 1>&lt;append chunk2>) AND (&lt;query() selection parameter>)
 *
 * @param inWhere the chunk of text to append to the WHERE clause. it will be escaped
 * to avoid SQL injection attacks
 */
public void appendWhereEscapeString(String inWhere) {
    if (mWhereClause == null) {
        mWhereClause = new StringBuilder(inWhere.length() + 16);
    }
    DatabaseUtils.appendEscapedSQLString(mWhereClause, inWhere);
}

源代码11 项目： sqlite-android 文件： SQLiteQueryBuilder.java

/**
 * Append a chunk to the WHERE clause of the query. All chunks appended are surrounded
 * by parenthesis and ANDed with the selection passed to {@link #query}. The final
 * WHERE clause looks like:
 *
 * WHERE (&lt;append chunk 1>&lt;append chunk2>) AND (&lt;query() selection parameter>)
 *
 * @param inWhere the chunk of text to append to the WHERE clause. it will be escaped
 * to avoid SQL injection attacks
 */
public void appendWhereEscapeString(String inWhere) {
    if (mWhereClause == null) {
        mWhereClause = new StringBuilder(inWhere.length() + 16);
    }
    if (mWhereClause.length() == 0) {
        mWhereClause.append('(');
    }
    DatabaseUtils.appendEscapedSQLString(mWhereClause, inWhere);
}

源代码12 项目： squidb 文件： SQLiteQueryBuilder.java

/**
 * Append a chunk to the WHERE clause of the query. All chunks appended are surrounded
 * by parenthesis and ANDed with the selection passed to {@link #query}. The final
 * WHERE clause looks like:
 *
 * WHERE (&lt;append chunk 1>&lt;append chunk2>) AND (&lt;query() selection parameter>)
 *
 * @param inWhere the chunk of text to append to the WHERE clause. it will be escaped
 * to avoid SQL injection attacks
 */
public void appendWhereEscapeString(String inWhere) {
    if (mWhereClause == null) {
        mWhereClause = new StringBuilder(inWhere.length() + 16);
    }
    if (mWhereClause.length() == 0) {
        mWhereClause.append('(');
    }
    DatabaseUtils.appendEscapedSQLString(mWhereClause, inWhere);
}

方法所在类

android.database.DatabaseUtils