模糊查询 like 语句该怎么写
- 第 1 种:在 Java 代码中添加 sql 通配符。
string wildcardname = “%smi%”; list<name> names = mapper.selectlike(wildcardname); <select id=”selectlike”> select * from foo where bar like #{value} </select>
- 第 2 种:在 sql 语句中拼接通配符,会引起 sql 注入
string wildcardname = “smi”; list<name> names = mapper.selectlike(wildcardname); <select id=”selectlike”> select * from foo where bar like "%"#{value}"%" </select>