apply(String applySql, Object... params)
apply(boolean condition, String applySql, Object... params)
注意事項:
該方法可用于數(shù)據(jù)庫函數(shù),動態(tài)入?yún)⒌?params
?對應前面?applySql
?內(nèi)部的?{index}
?部分.這樣是不會有sql注入風險的,反之會有!
apply("id = 1")--->id = 1
?apply("date_format(dateColumn,'%Y-%m-%d') = '2008-08-08'")--->date_format(dateColumn,'%Y-%m-%d') = '2008-08-08'")
?apply("date_format(dateColumn,'%Y-%m-%d') = {0}", "2008-08-08")--->date_format(dateColumn,'%Y-%m-%d') = '2008-08-08'")
?
更多建議: