refactor(module-biz): 优化 SQL 查询和报表数据处理

- 在 SQL 查询中使用 JSUtils.quoteEach 方法处理 departIds 参数，提高安全性
- 优化 ReportTargetStatisticsVO 中的年完成比率和月完成比率计算逻辑
- 重构代码，提高可读性和可维护性

@@ -60,7 +60,7 @@ public class ReportTargetStatisticsServiceImpl  implements IReportTargetStatisti
         sql += " left join(  select  aaa.depart_id, round(ifnull(sum(aaa.CSL)/10000,0),2) 'CSL'  from " + dataViewName2119_month+"aaa  group by aaa.depart_id ) ddd on ddd.depart_id  = d.id  ";
         sql += " left join(  select  aaa.depart_id, round(ifnull(sum(aaa.CSL)/10000,0),2) 'CSL'  from " + dataViewName2119_month+"aaa  group by aaa.depart_id ) ddd on ddd.depart_id  = d.id  ";
         sql += "  where d.depart_type = 1 ";
         sql += "  where d.depart_type = 1 ";
         if(StringUtils.isNotEmpty(departIds)){
         if(StringUtils.isNotEmpty(departIds)){
-        sql += "    and d.id  in ("+departIds+") ";
+        sql += "    and d.id  in ("+JSUtils.quoteEach(departIds,",")+") ";
         }
         }
         sql += "order by ccc.CSL desc ";
         sql += "order by ccc.CSL desc ";
         List<ReportTargetStatisticsVO> dataList = getJdbcTemplate().query(sql,new BeanPropertyRowMapper<>(ReportTargetStatisticsVO.class));
         List<ReportTargetStatisticsVO> dataList = getJdbcTemplate().query(sql,new BeanPropertyRowMapper<>(ReportTargetStatisticsVO.class));
@@ -94,7 +94,7 @@ public class ReportTargetStatisticsServiceImpl  implements IReportTargetStatisti
         sql += " left join (  select aaa.depart_id , round(ifnull(avg(aaa.yyh),0),2) yyh ,round(ifnull(avg(aaa.ydh),0),2) ydh  from "+dataViewName4411_month+" aaa group by aaa.depart_id  )bbb on bbb.depart_id = d.id";
         sql += " left join (  select aaa.depart_id , round(ifnull(avg(aaa.yyh),0),2) yyh ,round(ifnull(avg(aaa.ydh),0),2) ydh  from "+dataViewName4411_month+" aaa group by aaa.depart_id  )bbb on bbb.depart_id = d.id";
         sql += "  where d.depart_type = 1 ";
         sql += "  where d.depart_type = 1 ";
         if(StringUtils.isNotEmpty(departIds)){
         if(StringUtils.isNotEmpty(departIds)){
-            sql += " and d.id  in ("+departIds+") ";
+            sql += " and d.id  in ("+JSUtils.quoteEach(departIds,",")+") ";
         }
         }
         List<ReportTargetEnergyVO> dataList = getJdbcTemplate().query(sql,new BeanPropertyRowMapper<>(ReportTargetEnergyVO.class));
         List<ReportTargetEnergyVO> dataList = getJdbcTemplate().query(sql,new BeanPropertyRowMapper<>(ReportTargetEnergyVO.class));
         return dataList;
         return dataList;
@@ -140,7 +140,7 @@ public class ReportTargetStatisticsServiceImpl  implements IReportTargetStatisti
         sql += " left join(  select  aaa.depart_id, round(ifnull(sum(aaa.ysjsf)/10000,0),2) 'ysjsf'  from " + dataViewName4411_month+"aaa  group by aaa.depart_id ) ddd on ddd.depart_id  = d.id  ";
         sql += " left join(  select  aaa.depart_id, round(ifnull(sum(aaa.ysjsf)/10000,0),2) 'ysjsf'  from " + dataViewName4411_month+"aaa  group by aaa.depart_id ) ddd on ddd.depart_id  = d.id  ";
         sql += "  where d.depart_type = 1 ";
         sql += "  where d.depart_type = 1 ";
         if(StringUtils.isNotEmpty(departIds)){
         if(StringUtils.isNotEmpty(departIds)){
-            sql += "    and d.id  in ("+departIds+") ";
+            sql += "    and d.id  in ("+JSUtils.quoteEach(departIds,",")+") ";
         }
         }
         List<ReportTargetStatisticsVO> dataList = getJdbcTemplate().query(sql,new BeanPropertyRowMapper<>(ReportTargetStatisticsVO.class));
         List<ReportTargetStatisticsVO> dataList = getJdbcTemplate().query(sql,new BeanPropertyRowMapper<>(ReportTargetStatisticsVO.class));
         return dataList;
         return dataList;

 package com.skua.modules.statistics.vo;
 package com.skua.modules.statistics.vo;
 
 
+import cn.jiguang.common.utils.StringUtils;
 import com.skua.core.aspect.annotation.Dict;
 import com.skua.core.aspect.annotation.Dict;
 import com.skua.tool.util.JSUtils;
 import com.skua.tool.util.JSUtils;
 import io.swagger.annotations.ApiModel;
 import io.swagger.annotations.ApiModel;
@@ -59,4 +60,20 @@ public class ReportTargetStatisticsVO {
         expression = "100 * ( "+monthValue+"/"+monthTarget+" )";
         expression = "100 * ( "+monthValue+"/"+monthTarget+" )";
         this.monthWcBL = JSUtils.executeExpression(expression,"0.00");
         this.monthWcBL = JSUtils.executeExpression(expression,"0.00");
     }
     }
+
+    public String getYearWcBL() {
+        if(StringUtils.isEmpty(this.yearWcBL) && StringUtils.isNotEmpty(this.yearTarget) && StringUtils.isNotEmpty(this.yearValue)){
+            String expression = "100 * ( "+this.yearValue+"/"+this.yearTarget+" )";
+            this.yearWcBL = JSUtils.executeExpression(expression,"0.00");
+        }
+        return yearWcBL;
+    }
+
+    public String getMonthWcBL() {
+        if(StringUtils.isEmpty(this.monthWcBL) && StringUtils.isNotEmpty(this.monthTarget) && StringUtils.isNotEmpty(this.monthValue)){
+            String expression = "100 * ( "+this.monthValue+"/"+this.monthTarget+" )";
+            this.monthWcBL = JSUtils.executeExpression(expression,"0.00");
+        }
+        return monthWcBL;
+    }
 }
 }