我是ESAPIm的新手，而且我一直在寻找答案。我收到以下错误：
Attempting to load ESAPI.properties via file I/O.
Attempting to load ESAPI.properties as resource file via file I/O.
Not found in 'org.owasp.esapi.resources' directory or file not readable: C:\Documents and Settings\Administrator\Desktop\TEM - Workspace\testSecurity\ESAPI.properties
Not found in SystemResource Directory/resourceDirectory: .esapi\ESAPI.properties
Found in 'user.home' directory: C:\Documents and Settings\Administrator\esapi\ESAPI.properties
Loaded 'ESAPI.properties' properties file
Attempting to load validation.properties via file I/O.
Attempting to load validation.properties as resource file via file I/O.
Not found in 'org.owasp.esapi.resources' directory or file not readable: C:\Documents and Settings\Administrator\Desktop\TEM - Workspace\testSecurity\validation.properties
Not found in SystemResource Directory/resourceDirectory: .esapi\validation.properties
Found in 'user.home' directory: C:\Documents and Settings\Administrator\esapi\validation.properties
Loaded 'validation.properties' properties file
java.lang.reflect.InvocationTargetException Encoder class (org.owasp.esapi.reference.DefaultEncoder) CTOR threw exception
希望能尽快找到真正的答案。
这是我使用ESAPI登录的代码：
/* throws SQLExceptions */
public void login(String username, String password)
{
try
{
if(con == null)
connect();
if(con != null)
{
Codec ORACLE_CODEC = new OracleCodec();
String query = "SELECT * FROM tblmember where username = '"+ ESAPI.encoder().encodeForSQL(ORACLE_CODEC, username) +"'AND password '"+ESAPI.encoder().encodeForSQL(ORACLE_CODEC, password)+"' FROM ";
stm = con.createStatement();
rs = stm.executeQuery(query);
if(rs.next())
{
System.out.println(rs.getString("address"));
System.out.println(ESAPI.encoder().encodeForSQL(ORACLE_CODEC,"address"));
}
}
else
{
System.out.println("Not Connected!");
}
}
catch(Exception ex)
{
System.out.println(ex.getMessage() + " login");
}
}
public static void main(String[] args) throws SQLException
{
SQLInjection sq = new SQLInjection();
sq.login("username", "password");
}
非常感谢您的回复:)
最佳答案
只是为了向您提供有关使用API的技巧，请务必确保已阅读其中包含的文档。在这里，您可能会找到有助于使用API的信息。我相信这是一个依赖性问题。您可以here检查它。
希望这可以帮助。
关于java - java.lang.reflect.InvocationTargetException编码器类(org.owasp.esapi.reference.DefaultEncoder)CTOR抛出异常，我们在Stack Overflow上找到一个类似的问题：https://stackoverflow.com/questions/13925508/