JDBC模糊查询参数的注入的注意点

笔者刚开始是这样写sql语句的String sql="SELECT * FROM bookBasicInfo,bookTypeInfo WHERE bookBasicInfo.BelongTy ...