oracle 搜索型注入

Question

报错语句：org.springframework.jdbc.BadSqlGrammarException: PreparedStatementCallback; bad SQL grammar [select group_id,count(id) as c from t_consulting where 1=1 and T_CONSULTING.AUTHORIZEDISPLAY=1 and T_CONSULTING.VISIBLEFOROTHER=1 and T_CONSULTING.GROUP_ID in ('1') and T_CONSULTING.TITLE like '%%' order by 9'%%' and T_CONSULTING.CREATED<= ? and T_CONSULTING.STATUS in('answered','published') group by group_id]; nested exception is java.sql.SQLSyntaxErrorException: ORA-00933: SQL 命令未正确结束

这个为什么注入不了？有哪位师傅能解答一下吗？是因为 as 的原因吗？