rkpunjal / sql-injection-safe Goto Github PK

Today only a data like
'select xx from xxx '
are termed as invalid,

should disallow 'select id' as that also could be used

I am writing a program to generate dynamic queries based on the input user given for a search. There the user select the field and defines the condition.So I cannot use parametarised queries. So I used your library
And am checking the user input field with SqlSafeUtil.isSqlInjectionSafe("my-string-value")
I have verified some condition such as TABLE,UPDATE ,DELETE etc in that util. all are working fine.
But one basic check "OR 1=1" fails and it return true status. Any solution?