模糊查询的like '%$name$%'的sql注入避免
摘要:
Ibatis like 查询防止SQL注入的方法Ibatis like 查询防止SQL注入的方法mysql: select * from tbl_school where school_name like concat('%',#name#,'%') oracle: select * fro... 阅读全文
posted @ 2015-12-07 14:45 cn2025 阅读(3227) 评论(0) 推荐(0)