现在在请求url中有一个sql语句参数
test.d0?sql=select * from table where name like'%徐%';
在服务端用request.getParameter("sql");是null,我想应该是sql语句的符号不能解析,所以才有这个错误, 望指点?谢谢
[b]问题补充:[/b]
test.do?sql=select * from table where name like'%徐%';
[b]问题补充:[/b]
select * from mis_kkx.add_xdsj a where 1=1 and dwbm=0130333350101 and a.dwmc like '%杭州%' order by a.dwbm,a.xdbm
传递的sql语句是上面这条