Eclipse Community Forums: EclipseLink » Strange behaviour on Oracle 12 with escape character

Help

Home

Home » Eclipse Projects » EclipseLink » Strange behaviour on Oracle 12 with escape character

Show: Today's Messages :: Show Polls :: Message Navigator

Strange behaviour on Oracle 12 with escape character [message #1771484]

Fri, 25 August 2017 13:58

GianMaria Romanato

Messages: 54
Registered: November 2015

Member

Hello,

I need help troubleshooting a strange bug. There is an application running on Oracle 12 and Eclipselink 2.5.2 with a simple search screen that uses a LIKE clause and "%" as wildcards.

The application creates the query using criteria builder. A QA tester entered only the "_" underscore character in the search screen. The application does not check which text is passed and just wraps it with the '%' character.

cb.and(conjunction, cb.like(cb.lower(name), new StringBuilder("%").append(escape(param)).append("%").toString()));

At runtime, when the query is executed the following appears in the log:

bind => [%\_%, ACTIVE, IT, 20, 0]

Unexpectedly (at least for me) Eclipselink has decided to escape the "_" char with a leading "\". The database is Oracle 12. I would then expect the resulting query to be suffixed with "ESCAPE '\'" but this is not happening and the query returns nothing because in absence of the escape clause "\_" is processed as if it was the original user search string.

What am I missing?

thanks.

GianMaria.

Report message to a moderator

Re: Strange behaviour on Oracle 12 with escape character [message #1771681 is a reply to message #1771484]

Tue, 29 August 2017 13:53

Chris Delahunt

Messages: 1326
Registered: July 2009

Senior Member

What is the escape(param) method doing? This is your application method, not one that is apart of the StringBuilder or CriteriaQuery api.

Report message to a moderator

Re: Strange behaviour on Oracle 12 with escape character [message #1771685 is a reply to message #1771681]

Tue, 29 August 2017 14:00

GianMaria Romanato

Messages: 54
Registered: November 2015

Member

I understand it makes confusion, but in reality nothing special.
I did not write the code myself, the escape() method just calls Apache Commons-Lang StringEscapeUtils.escapeJava() which deals with quotes, tabs and few more. When called with a "_" in input it returns the same "_" in output.

Report message to a moderator

Re: Strange behaviour on Oracle 12 with escape character [message #1771795 is a reply to message #1771685]

Wed, 30 August 2017 14:51

Chris Delahunt

Messages: 1326
Registered: July 2009

Senior Member

You would be better off proving it by creating a string variable that you pass to the query, and printing it off before passing it in. You might also try using parameters rather than directly passing it in as a literal:

cb.and(conjunction, cb.like(cb.lower(name), cb.parameter(String.class, "name") ));
..
query.setParameter("name", yourString);

Report message to a moderator

Previous Topic:	Eclipse
Next Topic:	Getting hung threads in Eclipselink 2.6.4

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Tue Aug 20 13:38:16 GMT 2019

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter