Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/go-package-lab/mysql-orm
go get github.com/go-package-lab/mysql-orm
CREATE TABLE `test` (
`id` int(11) unsigned NOT NULL AUTO_INCREMENT,
`title` varchar(100) DEFAULT '',
`uid` int(10) DEFAULT '0',
PRIMARY KEY (`id`)
) ENGINE=InnoDB AUTO_INCREMENT=1 DEFAULT CHARSET=utf8mb4;
CREATE TABLE `test_attr` (
`id` int(10) DEFAULT '0',
`content` text,
UNIQUE KEY `id` (`id`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
package main
import (
DB "github.com/go-package-lab/mysql-orm"
"fmt"
"log"
"os"
)
//连接池1
var db1 = DB.DbConfig{
DriverName: "mysql",
Addr: "127.0.0.1",
User: "root",
Passwd: "root",
Port: "3306",
DBName: "test1",
Debug: true,
}
//连接池2
var db2 = DB.DbConfig{
DriverName: "mysql",
Addr: "127.0.0.1",
User: "root",
Passwd: "root",
Port: "3306",
DBName: "test2",
Debug: true,
}
func init() {
err := db1.Connect()
if err != nil {
fmt.Println("connect err:", err.Error())
os.Exit(1)
}
err = db2.Connect()
if err != nil {
fmt.Println("connect err:", err.Error())
os.Exit(1)
}
}
func main() {
defer db1.Close()
datas := make(DB.DataStruct)
datas["title"] = "今天天气不错"
datas["uid"] = 666
id, err := db1.Insert("test", datas)
if err != nil {
fmt.Println("insert err:", err.Error())
}
fmt.Println("连接池1: id = ", id)
//----------------------------------------------------------
defer db2.Close()
datas2 := make(DB.DataStruct)
datas2["title"] = "还是不错的"
datas2["uid"] = 999
//datas2["adddate"] = "2010-01-01"
datas2.Set("adddate", "2010-01-02")
id2, err := db2.Insert("test", datas2)
if err != nil {
fmt.Println("insert err:", err.Error())
}
fmt.Println("连接池2: id2 = ", id2)
//get one 获取一条
data, err := db2.GetOne("test", "*", "id > ? ORDER BY id DESC", 11)
fmt.Println(data)
fmt.Println(data["title"])
fmt.Println(data["uid"])
fmt.Println(data["adddate"])
fmt.Println(DB.Format2String(data, "adddate"))
//select
data2, err := db2.Select("test", "*", "title LIKE ? ORDER BY id DESC Limit 0,5", "%人民%")
for i, i2 := range data2 {
//fmt.Println(i, i2)
fmt.Println(i+1,DB.Format2String(i2, "title"))
}
//UPDATE
datas3 := make(DB.DataStruct)
datas3["title"] = "修改后的结果2"
datas3["uid"] = 8
rows, err := db2.Update("test", datas3, "id=?", 86)
fmt.Println("影响行数:", rows)
//delete
deleteid := 86
rows2, err := db2.Delete("test", "id=?", deleteid)
fmt.Println("影响行数:", rows2)
title := "----test---"
rows3, err := db2.Delete("test", "title=?", title)
fmt.Println("影响行数:", rows3)
//count
total, err := db2.Count("test", "id>? AND id<?", 190,195)
fmt.Println("总数:", total)
//批量插入
data9 := []DB.DataStruct{
DB.DataStruct{
"title": "A1111",
"uid": 100,
},
DB.DataStruct{
"title": "A2222",
"uid": 200,
},
}
num, err :=db2.BatchInsert("test", data9)
fmt.Println("成功插入:",num,"条",err)
//自定义联合查询
data10, err := db2.Query("SELECT * FROM test a,test_attr b where a.id=b.id AND a.uid=?",999)
for i, i2 := range data10 {
//fmt.Println(i, i2)
fmt.Println(i+1,DB.Format2String(i2, "content"))
}
//采用底层方法执行
var title2 string
err = db2.Db.QueryRow("select title from test where id = ?", 1).Scan(&title2)
if err != nil {
log.Fatal(err)
}
fmt.Println(title2)
//
}
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.