Mybatis模糊查询 map传递参数2.0

int addUser2(Map<String,Object> map);
User getUserById2(Map<String,Object> map);

 

 <select id="getUserById2" parameterType="map" resultType="com.kuang.pojo.User">
        select * from mybatis.user where id=#{id} and name=#{name}
    </select>

<insert id="addUser2" parameterType="map">
        insert into mybatis.user(id,pwd) value (#{userid},#{password})
    </insert>

    @Test
    public void addUser2(){
        SqlSession sqlSession = MybatisUtils.getSqlSession();
        UserMapper mapper = sqlSession.getMapper(UserMapper.class);
        Map<String,Object> map=new HashMap<String, Object>();
        map.put("userid",5);
        map.put("password","111");
        mapper.addUser2(map);
        sqlSession.commit();
        sqlSession.close();

    }
    @Test
    public void getUserById2(){
        SqlSession sqlSession = MybatisUtils.getSqlSession();
        UserMapper mapper = sqlSession.getMapper(UserMapper.class);
        Map<String,Object> map=new HashMap<String, Object>();
        map.put("id",1);
        map.put("name","张三");
        User user=mapper.getUserById2(map);
        System.out.println(user);
        sqlSession.close();
    }

模糊查询

漏了百分号

而且该方法有安全问题

采取第二种方法

 

List<User> getUserLike2(String name);

<select id="getUserLike2" parameterType="String" resultType="com.kuang.pojo.User">
        select * from mybatis.user where name like "%"#{name}"%";
    </select>

   @Test
    public void getUserLike2(){
        SqlSession sqlSession = MybatisUtils.getSqlSession();
        UserMapper mapper = sqlSession.getMapper(UserMapper.class);
        List<User> users = mapper.getUserLike2("王");
        for(User user:users){
            System.out.println(user);
        }

        sqlSession.close();
    }