Shulou(Shulou.com)05/31 Report--

This article is about the difference between # and $in sql. The editor thinks it is very practical, so share it with you as a reference and follow the editor to have a look.

# {} is used here, when using #:

1. When passing parameters, sql will add "" to parse as a string, such as role_id = "roleid" here.

2. # {} can prevent sql injection to a great extent

Extend:

1. If the incoming data is directly displayed in the generated sql, such as the above statement, and the roleid= incoming data is directly displayed in the generated sql, such as the above statement, using roleid= {roleId,jdbcType=INTEGER}, then the sql value is roleId = roleId when parsing, and an error will be reported during execution.

2. ${} mode cannot prevent sql injection

3. $is generally used to pass in database objects, such as database table names

4. Try to use # {} when you can

Note:

Note that when using order by dynamic parameters when mybaties sorting, use ${} instead of # {}

Thank you for reading! This is the end of the article on "what is the difference between # and $in sql". I hope the above content can be helpful to you, so that you can learn more knowledge. if you think the article is good, you can share it for more people to see!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.