http://blog.csdn.net/zdwzzu2006/article/details/4756675
http://www.cnblogs.com/suyuan/archive/2009/04/16/1436976.html
MYSQL+IBATIS
Ibatis queryWithRowHandler() still seems to fetch all rows
http://dev.mysql.com/doc/refman/5.1/en/connector-j-reference-implementation-notes.html
https://www.fortify.com/vulncat/en/vulncat/java/sql_injection_ibatis_data_map.html