Use Mybatis # And $ to obtain the parameter values. Use mybatis

Use Mybatis # And $ to obtain the parameter values. Use mybatis

In the mapper file of mybatis, we generally use # And $ to obtain the parameter values for the passed parameters.

When # is used, the variable is a placeholder. Is it a placeholder when java jdbc PrepareStatement is used ?, All can prevent SQL Injection

When $ is used, the variable is directly appended to the SQL statement, which usually causes SQL Injection problems.

One problem is: If you use mybatis to pass the time variable, if you use the # method to get the variable value, the type of the field in the database may not match, generally, we only need to obtain a String.