like语句防止SQL注入

mysql: select * from test where school_name like concat('%',${name},'%')  

oracle: select * from test where school_name like '%'||${name},'%'  

SQL Server:select * from test where school_name like '%'+${name},+'%'

posted @ 2020-11-27 14:57  八英里  阅读(1223)  评论(1编辑  收藏  举报