table name sql inject void coding2

src/main/resources/mybatis/mapper/its/statistics/AtrdTrafficStatisticsMapper.xml

@@ -49,26 +49,27 @@
                      A.STAT_DT,
                      A.TFVL, A.SPED, A.OCPY_RATE, A.TRVL_HH
             <if test='cond.TABLE_NAME eq "TB_LINK_15M_STAT"'>
-                FROM TB_LINK_15M_STAT A
+                FROM TB_LINK_15M_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_LINK_HH_STAT"'>
-                FROM TB_LINK_HH_STAT A
+                FROM TB_LINK_HH_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_LINK_DD_STAT"'>
-                FROM TB_LINK_DD_STAT A
+                FROM TB_LINK_DD_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_LINK_MN_STAT"'>
-                FROM TB_LINK_MN_STAT A
+                FROM TB_LINK_MN_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_LINK_YY_STAT"'>
-                FROM TB_LINK_YY_STAT A
+                FROM TB_LINK_YY_STAT A,
             </if>
                    (SELECT C.LINK_ID,
                            RANK() OVER(PARTITION BY A.ATRD_ID ORDER BY A.ORD, B.ORD, C.ORD) AS ORD
                     FROM TB_ATRD_ROAD_RLTN A, TB_ROAD_IFSC_RLTN B, TB_IFSC_LINK_RLTN C
                     WHERE A.ATRD_ID = #{cond.ID}
                       AND A.ROAD_ID = B.ROAD_ID
-                      AND B.IFSC_ID = C.IFSC_ID ) B
+                      AND B.IFSC_ID = C.IFSC_ID
+                   ) B
               WHERE A.LINK_ID = B.LINK_ID
                 AND A.STAT_DT BETWEEN #{cond.FROM_DT} AND #{cond.TO_DT}
              ) A,
@@ -123,25 +124,26 @@
                      A.STAT_DT,
                      A.TFVL, A.SPED, A.OCPY_RATE, A.TRVL_HH
             <if test='cond.TABLE_NAME eq "TB_IFSC_15M_STAT"'>
-                FROM TB_IFSC_15M_STAT A
+                FROM TB_IFSC_15M_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_IFSC_HH_STAT"'>
-                FROM TB_IFSC_HH_STAT A
+                FROM TB_IFSC_HH_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_IFSC_DD_STAT"'>
-                FROM TB_IFSC_DD_STAT A
+                FROM TB_IFSC_DD_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_IFSC_MN_STAT"'>
-                FROM TB_IFSC_MN_STAT A
+                FROM TB_IFSC_MN_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_IFSC_YY_STAT"'>
-                FROM TB_IFSC_YY_STAT A
+                FROM TB_IFSC_YY_STAT A,
             </if>
                    (SELECT B.IFSC_ID,
                            RANK() OVER(PARTITION BY A.ATRD_ID ORDER BY A.ORD, B.ORD) AS ORD
                     FROM TB_ATRD_ROAD_RLTN A, TB_ROAD_IFSC_RLTN B
                     WHERE A.ATRD_ID = #{cond.ID}
-                      AND A.ROAD_ID = B.ROAD_ID ) B
+                      AND A.ROAD_ID = B.ROAD_ID
+                   ) B
               WHERE A.IFSC_ID = B.IFSC_ID
                 AND A.STAT_DT BETWEEN #{cond.FROM_DT} AND #{cond.TO_DT}
              ) A,
@@ -196,23 +198,24 @@
                      A.STAT_DT,
                      A.TFVL, A.SPED, A.OCPY_RATE, A.TRVL_HH
             <if test='cond.TABLE_NAME eq "TB_ROAD_15M_STAT"'>
-                FROM TB_ROAD_15M_STAT A
+                FROM TB_ROAD_15M_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_ROAD_HH_STAT"'>
-                FROM TB_ROAD_HH_STAT A
+                FROM TB_ROAD_HH_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_ROAD_DD_STAT"'>
-                FROM TB_ROAD_DD_STAT A
+                FROM TB_ROAD_DD_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_ROAD_MN_STAT"'>
-                FROM TB_ROAD_MN_STAT A
+                FROM TB_ROAD_MN_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_ROAD_YY_STAT"'>
-                FROM TB_ROAD_YY_STAT A
+                FROM TB_ROAD_YY_STAT A,
             </if>
                    (SELECT ROAD_ID, ORD
                       FROM TB_ATRD_ROAD_RLTN
-                     WHERE ATRD_ID = #{cond.ID}) B
+                     WHERE ATRD_ID = #{cond.ID}
+                   ) B
               WHERE A.ROAD_ID = B.ROAD_ID
                 AND A.STAT_DT BETWEEN #{cond.FROM_DT} AND #{cond.TO_DT}
              ) A,
@@ -271,26 +274,27 @@
                      A.STAT_DT,
                      A.TFVL, A.SPED, A.OCPY_RATE, A.TRVL_HH
             <if test='cond.TABLE_NAME eq "TB_LINK_15M_STAT"'>
-                FROM TB_LINK_15M_STAT A
+                FROM TB_LINK_15M_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_LINK_HH_STAT"'>
-                FROM TB_LINK_HH_STAT A
+                FROM TB_LINK_HH_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_LINK_DD_STAT"'>
-                FROM TB_LINK_DD_STAT A
+                FROM TB_LINK_DD_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_LINK_MN_STAT"'>
-                FROM TB_LINK_MN_STAT A
+                FROM TB_LINK_MN_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_LINK_YY_STAT"'>
-                FROM TB_LINK_YY_STAT A
+                FROM TB_LINK_YY_STAT A,
             </if>
                    (SELECT C.LINK_ID,
                            RANK() OVER(PARTITION BY A.ATRD_ID ORDER BY A.ORD, B.ORD, C.ORD) AS ORD
                     FROM TB_ATRD_ROAD_RLTN A, TB_ROAD_IFSC_RLTN B, TB_IFSC_LINK_RLTN C
                     WHERE A.ATRD_ID = #{cond.ID}
                       AND A.ROAD_ID = B.ROAD_ID
-                      AND B.IFSC_ID = C.IFSC_ID ) B
+                      AND B.IFSC_ID = C.IFSC_ID
+                   ) B
               WHERE A.LINK_ID = B.LINK_ID
                 AND A.STAT_DT BETWEEN #{cond.FROM_DT} AND #{cond.TO_DT}
                 AND SUBSTR(A.STAT_DT, 9, 6) BETWEEN #{cond.FROM_HM} AND #{cond.TO_HM}
@@ -347,25 +351,26 @@
                      A.STAT_DT,
                      A.TFVL, A.SPED, A.OCPY_RATE, A.TRVL_HH
             <if test='cond.TABLE_NAME eq "TB_IFSC_15M_STAT"'>
-                FROM TB_IFSC_15M_STAT A
+                FROM TB_IFSC_15M_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_IFSC_HH_STAT"'>
-                FROM TB_IFSC_HH_STAT A
+                FROM TB_IFSC_HH_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_IFSC_DD_STAT"'>
-                FROM TB_IFSC_DD_STAT A
+                FROM TB_IFSC_DD_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_IFSC_MN_STAT"'>
-                FROM TB_IFSC_MN_STAT A
+                FROM TB_IFSC_MN_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_IFSC_YY_STAT"'>
-                FROM TB_IFSC_YY_STAT A
+                FROM TB_IFSC_YY_STAT A,
             </if>
                    (SELECT B.IFSC_ID,
                            RANK() OVER(PARTITION BY A.ATRD_ID ORDER BY A.ORD, B.ORD) AS ORD
                     FROM TB_ATRD_ROAD_RLTN A, TB_ROAD_IFSC_RLTN B
                     WHERE A.ATRD_ID = #{cond.ID}
-                      AND A.ROAD_ID = B.ROAD_ID ) B
+                      AND A.ROAD_ID = B.ROAD_ID
+                   ) B
               WHERE A.IFSC_ID = B.IFSC_ID
                 AND A.STAT_DT BETWEEN #{cond.FROM_DT} AND #{cond.TO_DT}
                 AND SUBSTR(A.STAT_DT, 9, 6) BETWEEN #{cond.FROM_HM} AND #{cond.TO_HM}
@@ -422,23 +427,24 @@
                      A.STAT_DT,
                      A.TFVL, A.SPED, A.OCPY_RATE, A.TRVL_HH
             <if test='cond.TABLE_NAME eq "TB_ROAD_15M_STAT"'>
-                FROM TB_ROAD_15M_STAT A
+                FROM TB_ROAD_15M_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_ROAD_HH_STAT"'>
-                FROM TB_ROAD_HH_STAT A
+                FROM TB_ROAD_HH_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_ROAD_DD_STAT"'>
-                FROM TB_ROAD_DD_STAT A
+                FROM TB_ROAD_DD_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_ROAD_MN_STAT"'>
-                FROM TB_ROAD_MN_STAT A
+                FROM TB_ROAD_MN_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_ROAD_YY_STAT"'>
-                FROM TB_ROAD_YY_STAT A
+                FROM TB_ROAD_YY_STAT A,
             </if>
                    (SELECT ROAD_ID, ORD
-                    FROM TB_ATRD_ROAD_RLTN
-                    WHERE ATRD_ID = #{cond.ID}) B
+                      FROM TB_ATRD_ROAD_RLTN
+                     WHERE ATRD_ID = #{cond.ID}
+                   ) B
               WHERE A.ROAD_ID = B.ROAD_ID
                 AND A.STAT_DT BETWEEN #{cond.FROM_DT} AND #{cond.TO_DT}
                 AND SUBSTR(A.STAT_DT, 9, 6) BETWEEN #{cond.FROM_HM} AND #{cond.TO_HM}
@@ -503,26 +509,27 @@
                      A.STAT_DT,
                      A.TFVL, A.SPED, A.OCPY_RATE, A.TRVL_HH
             <if test='cond.TABLE_NAME eq "TB_LINK_15M_STAT"'>
-                FROM TB_LINK_15M_STAT A
+                FROM TB_LINK_15M_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_LINK_HH_STAT"'>
-                FROM TB_LINK_HH_STAT A
+                FROM TB_LINK_HH_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_LINK_DD_STAT"'>
-                FROM TB_LINK_DD_STAT A
+                FROM TB_LINK_DD_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_LINK_MN_STAT"'>
-                FROM TB_LINK_MN_STAT A
+                FROM TB_LINK_MN_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_LINK_YY_STAT"'>
-                FROM TB_LINK_YY_STAT A
+                FROM TB_LINK_YY_STAT A,
             </if>
                    (SELECT C.LINK_ID,
                            RANK() OVER(PARTITION BY A.ATRD_ID ORDER BY A.ORD, B.ORD, C.ORD) AS ORD
                     FROM TB_ATRD_ROAD_RLTN A, TB_ROAD_IFSC_RLTN B, TB_IFSC_LINK_RLTN C
                     WHERE A.ATRD_ID = #{cond.ID}
                       AND A.ROAD_ID = B.ROAD_ID
-                      AND B.IFSC_ID = C.IFSC_ID ) B
+                      AND B.IFSC_ID = C.IFSC_ID
+                   ) B
               WHERE A.LINK_ID = B.LINK_ID
             <if test="cond.statDays != null and cond.statDays.size > 0">
                 AND
@@ -589,25 +596,26 @@
                      A.STAT_DT,
                      A.TFVL, A.SPED, A.OCPY_RATE, A.TRVL_HH
             <if test='cond.TABLE_NAME eq "TB_IFSC_15M_STAT"'>
-                FROM TB_IFSC_15M_STAT A
+                FROM TB_IFSC_15M_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_IFSC_HH_STAT"'>
-                FROM TB_IFSC_HH_STAT A
+                FROM TB_IFSC_HH_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_IFSC_DD_STAT"'>
-                FROM TB_IFSC_DD_STAT A
+                FROM TB_IFSC_DD_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_IFSC_MN_STAT"'>
-                FROM TB_IFSC_MN_STAT A
+                FROM TB_IFSC_MN_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_IFSC_YY_STAT"'>
-                FROM TB_IFSC_YY_STAT A
+                FROM TB_IFSC_YY_STAT A,
             </if>
                    (SELECT B.IFSC_ID,
                            RANK() OVER(PARTITION BY A.ATRD_ID ORDER BY A.ORD, B.ORD) AS ORD
                     FROM TB_ATRD_ROAD_RLTN A, TB_ROAD_IFSC_RLTN B
                     WHERE A.ATRD_ID = #{cond.ID}
-                      AND A.ROAD_ID = B.ROAD_ID ) B
+                      AND A.ROAD_ID = B.ROAD_ID
+                   ) B
               WHERE A.IFSC_ID = B.IFSC_ID
             <if test="cond.statDays != null and cond.statDays.size > 0">
                 AND
@@ -674,23 +682,24 @@
                      A.STAT_DT,
                      A.TFVL, A.SPED, A.OCPY_RATE, A.TRVL_HH
             <if test='cond.TABLE_NAME eq "TB_ROAD_15M_STAT"'>
-                FROM TB_ROAD_15M_STAT A
+                FROM TB_ROAD_15M_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_ROAD_HH_STAT"'>
-                FROM TB_ROAD_HH_STAT A
+                FROM TB_ROAD_HH_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_ROAD_DD_STAT"'>
-                FROM TB_ROAD_DD_STAT A
+                FROM TB_ROAD_DD_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_ROAD_MN_STAT"'>
-                FROM TB_ROAD_MN_STAT A
+                FROM TB_ROAD_MN_STAT A,
             </if>
             <if test='cond.TABLE_NAME eq "TB_ROAD_YY_STAT"'>
-                FROM TB_ROAD_YY_STAT A
+                FROM TB_ROAD_YY_STAT A,
             </if>
                    (SELECT ROAD_ID, ORD
                     FROM TB_ATRD_ROAD_RLTN
-                    WHERE ATRD_ID = #{cond.ID}) B
+                    WHERE ATRD_ID = #{cond.ID}
+                    ) B
               WHERE A.ROAD_ID = B.ROAD_ID
             <if test="cond.statDays != null and cond.statDays.size > 0">
                 AND