fix:sql注入修复

models/target.go

@@ -1238,7 +1238,7 @@ left join edbdata b on a.TRADE_CODE=b.TRADE_CODE `
 	sql += ` GROUP BY a.TRADE_CODE `
 
 	sql = sql + ` ORDER BY CONVERT(a.SEC_NAME USING gbk )  COLLATE gbk_chinese_ci ASC `
-	_, err = o.Raw(sql).QueryRows(&items)
+	_, err = o.Raw(sql, pars).QueryRows(&items)
 	return
 
 }