模糊查詢 like 語句該怎么寫?

第 1 種：在 Java 代碼中添加 sql 通配符。

string wildcardname = “%smi%”;

list<name> names = mapper.selectlike(wildcardname);

<select id=”selectlike”>

select * from foo where bar like #{value}

</select>

第 2 種：在 sql 語句中拼接通配符，會引起 sql 注入

string wildcardname = “smi”;

list<name> names = mapper.selectlike(wildcardname);

<select id=”selectlike”>

select * from foo where bar like "%"#{value}"%"

</select>