java处理sql注入的方法：

方法1：

String sql = " select * from s_org where org_name like :ssdqStr ";
MapSqlParameterSource msq = new MapSqlParameterSource();
NamedParameterJdbcTemplate jdbc = new NamedParameterJdbcTemplate(jdbcTemplate);
msq.addValue("ssdqStr",ssdqStr+"%");
List<Map<String,Object>> maps = jdbc.queryForList(sql,msq);

方法2：

  public List<Map<String, Object>> getSj(Map<String, Object> map) {
        String condition = "condition";
        String sql = " select * from s_user where  ${condition}   " ;
        sql = sql.replace("${condition}", condition);
        List<Map<String, Object>> list = jdbcTemplate.queryForList(sql);
        return list;
    }