AI SDL 数字分身

package com.alipay.subsidy.service;

import java.sql.*;
import java.util.List;

public class OrderService {
    private Connection conn;
    
    public OrderService() {
        try {
            conn = DriverManager.getConnection(
                "jdbc:mysql://localhost:3306/subsidy",
                "root",
                "password"
            );
        } catch (SQLException e) {
            e.printStackTrace();
        }
    }
    
    public List<Order> getOrdersByUserId(String userId) {
        List<Order> orders = new ArrayList<>();
        try {
            // 漏洞点: SQL注入风险
            Statement stmt = conn.createStatement();
            ResultSet rs = stmt.executeQuery("SELECT * FROM orders WHERE user_id = '" + userId + "'");
            
            while (rs.next()) {
                Order order = new Order();
                order.setId(rs.getString("id"));
                order.setAmount(rs.getBigDecimal("amount"));
                orders.add(order);
            }
        } catch (SQLException e) {
            e.printStackTrace();
        }
        return orders;
    }
    
    public Order getOrderById(String orderId) {
        Order order = null;
        try {
            // 漏洞点: 越权访问风险
            Statement stmt = conn.createStatement();
            ResultSet rs = stmt.executeQuery("SELECT * FROM orders WHERE id = '" + orderId + "'");
            
            if (rs.next()) {
                order = new Order();
                order.setId(rs.getString("id"));
                order.setUserId(rs.getString("user_id"));
                order.setAmount(rs.getBigDecimal("amount"));
            }
        } catch (SQLException e) {
            e.printStackTrace();
        }
        return order;
    }
    
    public void updateOrderStatus(String orderId, String status) {
        try {
            // 漏洞点: 缺乏权限校验
            PreparedStatement pstmt = conn.prepareStatement(
                "UPDATE orders SET status = ? WHERE id = ?"
            );
            pstmt.setString(1, status);
            pstmt.setString(2, orderId);
            pstmt.executeUpdate();
        } catch (SQLException e) {
            e.printStackTrace();
        }
    }
}