Ibatis like 查询防止SQL注入的方法

Ibatis like 查询防止SQL注入的方法

mysql: select * from tbl_school where school_name like concat('%',#name#,'%')    
   
oracle: select * from tbl_school where school_name like '%'||#name#||'%'    
   
sql server:select * from tbl_school where school_name like '%'+#name#+'%'
posted @ 2009-12-15 12:11  sunney  阅读(1862)  评论(1编辑  收藏  举报