like避免sql注入的示例:
在区分数据库下的用法区分,例如:
//mysql环境
select * from test where school_name like concat('%',${name},'%')
//oracle环境
select * from test where school_name like '%'||${name},'%'
//SQL Server环境
select * from test where school_name like '%'+${name},+'%'
本文来源:https://www.yuntue.com/post/62046.html | 云服务器网,转载请注明出处!

微信扫一扫打赏
支付宝扫一扫打赏