From e0c284c3f848e6e528d2f6e63c4da1148471048a Mon Sep 17 00:00:00 2001
From: zyy <zyy@email.com>
Date: Tue, 23 Dec 2025 12:57:38 +0800
Subject: [PATCH] &转义

---
 trading-order-service/src/main/java/com/yami/trading/service/dz/impl/StockDzServiceImpl.java |  168 ++++++++++++++++++++++++++++++++++++++++++++-----------
 1 files changed, 133 insertions(+), 35 deletions(-)

diff --git a/trading-order-service/src/main/java/com/yami/trading/service/dz/impl/StockDzServiceImpl.java b/trading-order-service/src/main/java/com/yami/trading/service/dz/impl/StockDzServiceImpl.java
index 3a0cf8f..464db72 100644
--- a/trading-order-service/src/main/java/com/yami/trading/service/dz/impl/StockDzServiceImpl.java
+++ b/trading-order-service/src/main/java/com/yami/trading/service/dz/impl/StockDzServiceImpl.java
@@ -24,8 +24,8 @@
 import com.yami.trading.common.domain.Result;
 import com.yami.trading.common.exception.YamiShopBindException;
 import com.yami.trading.common.util.Arith;
-import com.yami.trading.common.util.DateUtils;
 import com.yami.trading.common.util.RandomUtil;
+import com.yami.trading.common.util.StringEscapeUtil;
 import com.yami.trading.dao.dz.ExchangeApplyOrderDzMapper;
 import com.yami.trading.dao.dz.StockDzMapper;
 import com.yami.trading.service.MarketOpenChecker;
@@ -43,9 +43,9 @@
 import org.springframework.transaction.annotation.Transactional;
 
 import javax.annotation.Resource;
-import javax.servlet.http.HttpServletRequest;
+import java.lang.reflect.Field;
+import java.lang.reflect.Method;
 import java.math.BigDecimal;
-import java.math.RoundingMode;
 import java.text.DecimalFormat;
 import java.util.*;
 
@@ -87,9 +87,16 @@
             Page<StockDzDto> page = new Page<>(pageNum, pageSize);
             page = stockDzMapper.findStockTypeDz(page,orderBy,keyWords,formatDate, stockType);
             page.getRecords().forEach(stockDzDto -> {
-                Realtime realtime = this.dataService.realtime(stockDzDto.getStockCode()).get(0);
-                if (realtime != null) {
-                    stockDzDto.setCurrentPrice(realtime.getClose());
+                List<Realtime> list = this.dataService.realtime(stockDzDto.getStockCode());
+                if (!list.isEmpty() && list.get(0) != null) {
+                    stockDzDto.setCurrentPrice(list.get(0).getClose());
+                }
+                if (stockDzDto.getDayRate() != 0) {
+                    double dayRate = BigDecimal.valueOf(stockDzDto.getDayRate()).multiply(BigDecimal.valueOf(100)).doubleValue();
+                    stockDzDto.setDayRate(dayRate);
+                }
+                if (!stockDzDto.getStockName().isEmpty()) {
+                    stockDzDto.setStockName(StringEscapeUtil.unEscapeAmpersand(stockDzDto.getStockName()));
                 }
             });
             return Result.succeed(page);
@@ -100,13 +107,22 @@
     }
 
     @Override
-    public Result addByAdmin(String stockCode, String stockNum, String password, String startTime, String endTime, String discount,Integer period,String nowPrice,Integer switchType, String stockType, double dayRate) {
+    public Result addByAdmin(String stockCode, String stockName, String stockNum, String password, String startTime, String endTime, String discount,Integer period,String nowPrice,Integer switchType, String stockType, double dayRate) {
         if (stockCode == null || stockCode.isEmpty() || startTime == null || startTime.isEmpty() ||endTime == null || endTime.isEmpty() || nowPrice == null){
             return Result.failed("参数不能为空");
         }
-        if (stockType.equalsIgnoreCase(Item.indices) && dayRate == 0) {
-            return Result.failed("请输入日收益率");
+        if (stockType.equalsIgnoreCase(Item.indices)) {
+            if (dayRate == 0) {
+                return Result.failed("请输入日收益率");
+            }
+            if (stockName == null || stockName.isEmpty()){
+                return Result.failed("请输入股票名称");
+            }
         }
+
+        /*if (!stockName.isEmpty()) {
+            stockName = StringEscapeUtil.escapeAmpersand(stockName);
+        }*/
 
         //该类型是否已添加
         Long count = stockDzMapper.selectCount(new LambdaQueryWrapper<StockDz>()
@@ -116,16 +132,22 @@
             return Result.failed("股票代码已存在");
         }
 
-        Item item = itemService.findBySymbol(stockCode);
-        if(item == null){
-            return Result.failed("不存在该股票");
+        StockDz stockDz = new StockDz();
+        if (stockType.equalsIgnoreCase(Item.indices)) {
+            stockDz.setStockName(stockName);
+            stockDz.setStockCode(stockCode);
+            stockDz.setStockSpell(stockCode);
+        } else {
+            Item item = itemService.findBySymbol(stockCode);
+            if(item == null){
+                return Result.failed("不存在该股票");
+            }
+            stockDz.setStockName(item.getSymbolFullName());
+            stockDz.setStockCode(item.getSymbol());
+            stockDz.setStockSpell(item.getSymbolData());
         }
 
-        StockDz stockDz = new StockDz();
-        stockDz.setStockName(item.getSymbolFullName());
-        stockDz.setStockCode(item.getSymbol());
         stockDz.setStockType(stockType);
-        stockDz.setStockSpell(item.getSymbolData());
         stockDz.setIsLock(0);
         stockDz.setIsShow(1);
         stockDz.setAddTime(new Date());
@@ -140,6 +162,7 @@
         stockDz.setSwitchType(switchType);
         stockDz.setNowPrice(new BigDecimal(nowPrice));
         stockDz.setDayRate(dayRate);
+
         if (save(stockDz)) {
             return Result.succeed("添加成功");
         }
@@ -151,6 +174,31 @@
         try {
             Page page = new Page(pageNum, pageSize);
             stockDzMapper.getDzListByAdmin(page, Keywords, stockType);
+
+            page.getRecords().forEach(stockDzObj -> {
+                // 1. 判空 + 强转为HashMap(兼容所有Map子类,如LinkedHashMap)
+                if (stockDzObj == null || !(stockDzObj instanceof HashMap)) {
+                    return;
+                }
+
+                // 强转为HashMap<String, Object>(确保key是字符串类型)
+                HashMap<String, Object> stockDzMap = (HashMap<String, Object>) stockDzObj;
+
+                // 2. 获取stock_name字段值(注意:key的拼写/大小写要和Map中完全一致!)
+                Object oldValue = stockDzMap.get("stock_name");
+
+                // 3. 空值防护 + 处理&转义
+                if (oldValue instanceof String) {
+                    String oldStr = (String) oldValue;
+                    // 反转义&amp;为&
+                    String newStr = oldStr.replace("&amp;", "&");
+                    // 4. 重新赋值回HashMap
+                    stockDzMap.put("stock_name", newStr);
+                } else {
+                    // 字段值不是字符串/为null时的提示(方便排查)
+                    System.out.println("stock_name字段值异常:" + oldValue);
+                }
+            });
             return Result.succeed(page);
         } catch (Exception e) {
             log.error(e.getMessage());
@@ -167,19 +215,29 @@
             return Result.failed("股票代码已存在");
         }
 
-        Item item = itemService.findBySymbol(model.getStockCode());
-        if(item == null){
-            return Result.failed("不存在该股票");
-        }
-
         StockDz stockDz = stockDzMapper.selectById(model.getUuid());
         if(stockDz == null){
             return Result.failed("不存在该大宗信息");
         }
-        //model.setStockName(item.getSymbolFullName());
-        model.setStockCode(item.getSymbol());
+
+        /*if (!model.getStockName().isEmpty()) {
+            System.out.println(model.getStockName());
+            //model.setStockName(StringEscapeUtil.escapeAmpersand(model.getStockName()));
+        }*/
+
+        if (!stockDz.getStockType().equalsIgnoreCase(Item.indices)) {
+            Item item = itemService.findBySymbol(model.getStockCode());
+            if(item == null){
+                return Result.failed("不存在该股票");
+            } else {
+                model.setStockCode(item.getSymbol());
+                model.setStockSpell(item.getSymbolData());
+            }
+        } else {
+            model.setStockSpell(model.getStockCode());
+        }
         model.setStockType(stockDz.getStockType());
-        model.setStockSpell(item.getSymbolData());
+
         return stockDzMapper.updateById(model) > 0 ? Result.succeed("修改成功") : Result.failed("修改失败");
     }
 
@@ -200,11 +258,13 @@
             if (!page.getRecords().isEmpty()) {
                 List<ExchangeApplyOrderDzDto> list = page.getRecords();
                 list.forEach(dz -> {
-                    double closePrice;
+                    double closePrice = 0;
                     if (state != null) { //持仓
-                        Realtime realtime = this.dataService.realtime(dz.getSymbol()).get(0);
-                        //获取现价
-                        closePrice = realtime.getClose();
+                        List<Realtime> realtimeList = this.dataService.realtime(dz.getSymbol());
+                        if (!realtimeList.isEmpty() && realtimeList.get(0) != null) {
+                            //获取现价
+                            closePrice = realtimeList.get(0).getClose();
+                        }
                     } else { //已结算
                         closePrice = dz.getClosePrice();
                     }
@@ -235,6 +295,11 @@
                         String resultPer = df.format(profitPercentage);
                         dz.setProfitLossPercentage(Double.parseDouble(resultPer));
                     }
+
+                    if (!dz.getStockName().isEmpty()) {
+                        dz.setStockName(StringEscapeUtil.unEscapeAmpersand(dz.getStockName()));
+                    }
+
                 });
             }
 
@@ -251,9 +316,37 @@
             Page page = new Page(pageNum, pageSize);
 
             stockDzMapper.getDzCheckList(page ,state, stockCode, stockType, userName, checkedList);
+
+            page.getRecords().forEach(stockDzObj  -> {
+                if (stockDzObj == null) {
+                    return;
+                }
+
+                try {
+                    // ========== 第一步:获取字段值(以stockName为例) ==========
+                    // 1. 获取getter方法(JavaBean规范:字段名stockName → 方法名getStockName)
+                    Method getter = stockDzObj.getClass().getMethod("getStockName");
+                    // 2. 执行方法获取值
+                    Object oldValue = getter.invoke(stockDzObj);
+
+                    // ========== 第二步:处理字段值(仅当值不为null时) ==========
+                    if (oldValue instanceof String) { // 确保字段类型是String(根据实际字段类型调整)
+                        String newValue = ((String) oldValue).replace("&amp;", "&"); // 自定义处理逻辑
+
+                        // ========== 第三步:重新赋值 ==========
+                        // 1. 获取setter方法(参数为字段类型,比如String)
+                        Method setter = stockDzObj.getClass().getMethod("setStockName", String.class);
+                        // 2. 执行setter方法赋值
+                        setter.invoke(stockDzObj, newValue);
+                    }
+                } catch (Exception e) {
+                    // 捕获反射异常(方法不存在、权限不足等),避免循环中断
+                    log.error(e.getMessage());
+                }
+            });
             return Result.succeed(page);
         } catch (Exception e) {
-            log.error(e.getMessage());
+            log.error(e.getMessage(), e);
         }
         return Result.failed("获取失败");
     }
@@ -309,9 +402,11 @@
             }
 
             if (!isAdmin) { //后台买入不判断
-                boolean isOpen = MarketOpenChecker.isMarketOpenBuyDz(Item.US_STOCKS);
-                if (!isOpen) {
-                    return Result.failed("当前股市休市");
+                if (!stockDz.getStockName().contains("测试")) {
+                    boolean isOpen = MarketOpenChecker.isMarketOpenBuyDz(Item.US_STOCKS);
+                    if (!isOpen) {
+                        return Result.failed("当前股市休市");
+                    }
                 }
             }
 
@@ -599,7 +694,7 @@
             double closeAmt;
             String symbol = stockDz.getStockCode();
 
-            double closePrice;
+            double closePrice = 0;
             if (isETF) {
                 //按日收益率结算
                 closeAmt = order.getPrice();
@@ -607,8 +702,11 @@
                 closePrice = closeAmt;
                 closeAmt = closeAmt - orderFree.doubleValue();
             } else {
-                Realtime realtime = this.dataService.realtime(symbol).get(0);
-                closePrice = realtime.getClose();
+                List<Realtime> realtimeList = this.dataService.realtime(symbol);
+                if (!realtimeList.isEmpty() && realtimeList.get(0) != null) {
+                    //获取现价
+                    closePrice = realtimeList.get(0).getClose();
+                }
                 closeAmt = closePrice * num - orderFree.doubleValue();
             }
             if (closeAmt < 0) {

--
Gitblit v1.9.3