让用户ID抓包不泄露更安全

src/main/java/com/quinn/mapper/xml/BlogMapper.xml

@@ -3,8 +3,36 @@
 <mapper namespace="com.quinn.mapper.BlogMapper">
 
     <select id="getTopBlog" resultType="com.quinn.pojo.Blog">
-        select bid,title,(star + views) as views from qn_blog where sort = 0
-        order by (star + views) desc limit 5;
+        select bid,title,(star + views) as views from
+        (select bid,title,(select count(1) from qn_star where topic_id = bid and topic_category = 'BLOG') as star,views
+        from qn_blog where sort = 0) t
+        order by (views + star) desc limit 7
+    </select>
+
+    <select id="getBlogWithUserOrderBySort" parameterType="com.quinn.vo.MyPageParam" resultType="com.quinn.pojo.BlogWithUser">
+        select a.id,a.bid,a.title,a.sort,a.views,a.author_id,a.category_id,a.category_name,a.gmt_create,a.gmt_update
+        ,b.username,b.avatar,
+        (select count(1) from qn_star c where c.topic_id = a.bid and c.topic_category = 'BLOG') as star
+        from qn_blog a,qn_user b
+        where a.author_id = b.uid order by a.sort desc,a.gmt_create desc
+        limit #{pageNum},#{size}
+    </select>
+
+    <select id="getBlogWithUser" parameterType="com.quinn.vo.MyPageParam" resultType="com.quinn.pojo.BlogWithUser">
+        select a.id,a.bid,a.title,a.sort,a.views,a.author_id,a.category_id,a.category_name,a.gmt_create,a.gmt_update
+        ,b.username,b.avatar,
+        (select count(1) from qn_star c where c.topic_id = a.bid and c.topic_category = 'BLOG') as star
+        from qn_blog a,qn_user b
+        where a.author_id = b.uid order by a.gmt_create desc
+        limit #{pageNum},#{size}
+    </select>
+
+    <select id="getMyBlogs" resultType="com.quinn.pojo.BlogWithUser">
+        select a.id,a.bid,a.title,a.sort,a.views,a.author_id,a.category_id,a.category_name,a.gmt_create,a.gmt_update,
+        (select count(1) from qn_star c where c.topic_id = a.bid and c.topic_category = 'BLOG') as star
+        from qn_blog a
+        where a.author_id = #{userId} order by a.gmt_create desc
+        limit #{myPageParam.pageNum},#{myPageParam.size}
     </select>
 
 </mapper>

src/main/java/com/quinn/mapper/xml/CommentMapper.xml

@@ -2,4 +2,20 @@
 <!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
 <mapper namespace="com.quinn.mapper.CommentMapper">
 
+    <select id="getSourceCommentList" resultType="com.quinn.pojo.CommentWithUser">
+        select a.*,b.username,b.avatar from qn_comment a,qn_user b
+        where a.user_id = b.uid and a.topic_category = 'SOURCE'
+        and a.topic_id = #{topicId}
+        order by a.gmt_create desc
+        limit 100
+    </select>
+
+    <select id="getBlogCommentList" resultType="com.quinn.pojo.CommentWithUser">
+        select a.*,b.username,b.avatar from qn_comment a,qn_user b
+        where a.user_id = b.uid and a.topic_category = 'BLOG'
+        and a.topic_id = #{topicId}
+        order by a.gmt_create desc
+        limit 100
+    </select>
+
 </mapper>

src/main/java/com/quinn/mapper/xml/SourceCommentMapper.xml

@@ -1,5 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
-<mapper namespace="com.quinn.mapper.SourceCommentMapper">
-
-</mapper>

src/main/java/com/quinn/mapper/xml/StarMapper.xml

@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE mapper PUBLIC "-//mybatis.org//DTD Mapper 3.0//EN" "http://mybatis.org/dtd/mybatis-3-mapper.dtd">
+<mapper namespace="com.quinn.mapper.StarMapper">
+
+    <select id="listStars" resultType="com.quinn.pojo.StarWithTopic">
+        select * from
+        (
+        select a.*,b.title as topicName from qn_star a,qn_blog b
+        where a.topic_id = b.bid
+        and a.topic_category = 'BLOG'
+        and a.user_id = #{userId}
+        union all
+        select a.*,c.source_name as topicName from qn_star a,qn_source c
+        where a.topic_id = c.sid
+        and a.topic_category = 'SOURCE'
+        and a.user_id = #{userId}) t
+        order by t.gmt_create desc
+        limit #{myPageParam.pageNum},#{myPageParam.size}
+    </select>
+
+</mapper>