?<!--concat Mysql和 Oracle區(qū)別 ,不存在sql注入-->
? <select id="findUserByLikeName3" parameterType="java.lang.String" resultMap="user">
? ? ? select * from t_user where name like concat('%',#{name,jdbcType=VARCHAR},'%')
? </select>

?? ?<select id="selectLogininforList" parameterType="SysLogininfor" resultMap="SysLogininforResult">
?? ??? ?select info_id,login_name,ipaddr,login_location,browser,os,status,msg,login_time from sys_logininfor
?? ??? ?<where>
?? ??? ??? ?<if test="ipaddr != null and ipaddr != ''">
?? ??? ??? ??? ?AND ipaddr like concat('%', #{ipaddr}, '%')
?? ??? ??? ?</if>
?? ??? ??? ?<if test="status != null and status != ''">
?? ??? ??? ??? ?AND status = #{status}
?? ??? ??? ?</if>
?? ??? ??? ?<if test="loginName != null and loginName != ''">
?? ??? ??? ??? ?AND login_name like concat('%', #{loginName}, '%')
?? ??? ??? ?</if>
?? ??? ??? ?<if test="params.beginTime != null and params.beginTime != ''"><!-- 開始時間檢索 -->
?? ??? ??? ??? ?and date_format(login_time,'%y%m%d') &gt;= date_format(#{params.beginTime},'%y%m%d')
?? ??? ??? ?</if>
?? ??? ??? ?<if test="params.endTime != null and params.endTime != ''"><!-- 結束時間檢索 -->
?? ??? ??? ??? ?and date_format(login_time,'%y%m%d') &lt;= date_format(#{params.endTime},'%y%m%d')
?? ??? ??? ?</if>
?? ??? ?</where>
?? ?</select>