Ibatis order by prevents SQL injection

(1) Sort control

Select table_name, tablespace_name from User_tables ORDER BY table_name $ordertype $

Where the user input OrderType ASC, DESC. On this keyword, use the $ordertype: sqlkeyword$ replacement $ OrderType $.

(2) Sort fields

SQL statement metadata. IF The SQL statement, there is user input metadata. Table name, field names and so on.

For example the following SQL:
Select table_name, tablespace_name from User_tables ORDER by $ orderbycolumn $.

Which is the field in the database Orderbycolumn. Of this metadata, use: $ Orderbycolumn:metadata $ replacement $ orderbycolumn $.

Ibatis order by prevents SQL injection