Mybatis模糊查询 map传递参数2.0

int addUser2(Map map);
User getUserById2(Map map);

 
        select * from mybatis.user where id=#{id} and name=#{name}
    


        insert into mybatis.user(id,pwd) value (#{userid},#{password})
    

    @Test
    public void addUser2(){
        SqlSession sqlSession = MybatisUtils.getSqlSession();
        UserMapper mapper = sqlSession.getMapper(UserMapper.class);
        Map map=new HashMap();
        map.put("userid",5);
        map.put("password","111");
        mapper.addUser2(map);
        sqlSession.commit();
        sqlSession.close();

    }
    @Test
    public void getUserById2(){
        SqlSession sqlSession = MybatisUtils.getSqlSession();
        UserMapper mapper = sqlSession.getMapper(UserMapper.class);
        Map map=new HashMap();
        map.put("id",1);
        map.put("name","张三");
        User user=mapper.getUserById2(map);
        System.out.println(user);
        sqlSession.close();
    }

模糊查询

漏了百分号

而且该方法有安全问题

采取第二种方法

List getUserLike2(String name);

        select * from mybatis.user where name like "%"#{name}"%";
    

   @Test
    public void getUserLike2(){
        SqlSession sqlSession = MybatisUtils.getSqlSession();
        UserMapper mapper = sqlSession.getMapper(UserMapper.class);
        List users = mapper.getUserLike2("王");
        for(User user:users){
            System.out.println(user);
        }

        sqlSession.close();
    }