java代码中拼sql注意" "加空格

拼接sql 特别注意：

 String sql =
                "SELECT\n" +
                        "\t( SELECT code_name FROM IP_WIDGET_VALUE_CODE WHERE CODE = oo.USE_STATUS ) AS USE_STATUS_NAME,\n" +
                        "\t( SELECT code_name FROM IP_WIDGET_VALUE_CODE WHERE CODE = oo.PERMIT_TYPE ) AS PERMIT_TYPE_NAME,\n" +
                        "\txx.*,\n" +
                        "\too.VERSION_ID,\n" +
                        "\too.PERMIT_TYPE,\n" +
                        "\too.PERMIT_NUMBER,\n" +
                        "\too.WORK_AREA,\n" +
                        "\too.WORK_POSITION,\n" +
                        "\too.WORK_CONTENT,\n" +
                        "\too.START_DATE,\n" +
                        "\too.END_DATE,\n" +
                        "\too.IS_GAS,\n" +
                        "\too.APPLY_TIME,\n" +
                        "\too.USE_STATUS,\n" +
                        "\too.IS_HAVE_PARTIES,\n" +
                        "\too.AFFECTED_PARTIES \n" +
                        "FROM\n" +
                        "\tst_risk_camera xx,\n" +
                        "\tst_risk_permit oo \n" +
                        "WHERE\n" +
                        "\txx.permit_id = oo.permit_id";
        SqlEngine sqlEngine = new SqlEngine(dataSource);
        HashMap paras = new HashMap();
        Set<String> siteId = priCommonService.getLoginUserSiteId();
        if (siteId != null && siteId.size() > 0) {
          //特别注意  上面的sql 在拼下面sql 一定注意  "  AND oo.SITE_ID IN (:siteId) ";  加个空格  不然会  "\txx.permit_id = oo.permit_idAND 00";  这样肯定不对！！！！！
            sql += " AND oo.SITE_ID IN (:siteId) ";
            paras.put("siteId", siteId);
        }