。。

services/base_from_python.go

@@ -70,12 +70,9 @@ func ExecPythonCode(edbCode, reqCode string) (dataMap models.EdbDataFromPython,
 	}()
 
 	// 限制python代码的执行，如果包含特殊的关键词，则报错
-	wordsSlice := strings.Split(edbCode, " ")
-	for _, v := range wordsSlice {
-		if strings.ToLower(v) == "drop" || strings.ToLower(v) == "delete" || strings.ToLower(v) == "update" || strings.ToLower(v) == "alter" || strings.ToLower(v) == "truncate" {
-			err = fmt.Errorf("不支持该命令")
-			return
-		}
+	if strings.Contains(edbCode, "drop") || strings.Contains(edbCode, "delete") || strings.Contains(edbCode, "update") || strings.Contains(edbCode, "alter") || strings.Contains(edbCode, "truncate") {
+		err = fmt.Errorf("不支持该命令")
+		return
 	}
 
 	//获取python文件的绝对地址