字符串替换在javascript中不起作用（带双引号）

Question

请查看以下代码，如果我未执行该函数中的“卫生”步骤，则该代码不会替换字符串值。

有人可以帮助我理解这一点吗？

完整的代码：

<script type="text/javascript">
function replaceString(orgStr,oldStr,newStr){

//############# Sanitary Steps #############//
oldStr = oldStr .replace(/[ ]+/g,"$");
oldStr = oldStr .replace(/[$]+/g," ");
orgStr = orgStr .replace(/[ ]+/g,"$");
orgStr = orgStr .replace(/[$]+/g," ");
newStr = newStr .replace(/[ ]+/g,"$");
newStr = newStr .replace(/[$]+/g," ");
//############# Sanitary Steps #############//

orgStr = orgStr.replace(oldStr,newStr);
if(orgStr.indexOf(oldStr) != -1){
orgStr = replaceString(orgStr,oldStr,newStr)
}
return orgStr;
}
var fields = ['"Employee Expense Facts"."Total Expense"','"Expense Amount by Expense Type Facts"."Airfare Expense Amount"'];
var selectedField = 0;
var selectedField = 0;
var qry = 'SELECT rcount(1) s_0, "Employee Expenses"."Time"."Date" s_1, "Employee Expenses"."Employee Expense Facts"."Total Expense" s_2 FROM "Employee Expenses" WHERE ("Employee Expense Facts"."Total Expense" IS NOT NULL) ORDER BY 1, 2 ASC NULLS LAST WHERE ("Employee Expense Facts"."Total Expense" IS NOT NULL) ORDER BY 1, 2 ASC NULLS LAST';
qry = qry .replace(/[\n\t\r]+/g," ");
var qry2 = replaceString(qry,""+fields[0],""+fields[1]);
console.log(qry2);

</script>

帮助我了解为什么我需要执行这些卫生步骤？？？ 我只是通过反复试验的方法找到了解决方案。

Answer 1

我的建议是：丢弃所有代码！

现在再次开始，通过普通的formsubmit或ajax调用将数据从客户端传递到服务器。 现在在服务器端处理它们。

并永远记住第一条规则：

1）您永远不能相信所有用户都能按照自己的方式进行操作。

这就是为什么永远不要创建您的SQL客户端！

Answer 2

问题出在SQL本身中：

SELECT rcount(1) s_0,
       "Employee Expenses"."Time"."Date" s_1,
       "Employee Expenses"."Employee Expense Facts"."Total Expense" s_2 
FROM   "Employee Expenses" 
WHERE ("Employee Expense Facts"."Total Expense" IS NOT NULL)
       ORDER BY 1, 2 ASC NULLS LAST 
WHERE ("Employee Expense Facts"."Total Expense" IS NOT NULL)
       ORDER BY 1, 2 ASC NULLS LAST

我发现有双引号，即使使用转义符后也不会替换。 我尝试用特殊字符替换（“），然后执行字符串替换，但未能成功完成。

令人惊讶的是，如果您在本地HTML文件上创建此函数，则无需使用卫生代码即可运行。 但是，当我在服务器上上传相同的代码时，它不起作用。 为此，我不得不设置卫生管线。

如果还有其他人找出原因，请告诉我:)

谢谢vx