driver=com.mysql.jdbc.Driver
url=jdbc:mysql://127.0.0.1:3306/test
username=root
password=root

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE sqlMapConfig PUBLIC "-//ibatis.apache.org//DTD SQL Map Config 2.0//EN"
"http://ibatis.apache.org/dtd/sql-map-config-2.dtd">
<sqlMapConfig>
	<!-- 引用JDBC屬性的配置文件 -->
	<properties resource="com/ligang/SqlMap.properties"/>
	<!-- 使用JDBC的事務(wù)管理 -->
	<transactionManager type="JDBC">
		<!-- 數(shù)據(jù)源 -->
		<dataSource type="SIMPLE">
			<property name="JDBC.Driver" value="${driver}"/>
			<property name="JDBC.ConnectionURL" value="${url}"/>
			<property name="JDBC.Username" value="${username}"/>
			<property name="JDBC.Password" value="${password}"/>
		</dataSource>
	</transactionManager>
	<!-- 這里可以寫多個實體的映射文件 -->
	<sqlMap resource="com/ligang/Student.xml"/>
</sqlMapConfig>

<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE sqlMap PUBLIC "-//ibatis.apache.org//DTD SQL Map 2.0//EN"
"http://ibatis.apache.org/dtd/sql-map-2.dtd">
<sqlMap>
	<!-- 通過typeAlias使得我們在下面使用Student實體類的時候不需要寫包名 -->
	<typeAlias alias="Student" type="com.ligang.Student"/>
	
	<!-- id表示select里的sql語句，resultClass表示返回結(jié)果的類型 -->
	<select id="findAll" resultClass="Student">
		select * from student
	</select>
	<!-- parameterClass表示參數(shù)的內(nèi)容 -->
	<select id="findByID" parameterClass="String" resultClass="Student">
		select * from student where id = #id#
	</select>
	
	<insert id="insertStudent" parameterClass="Student">
		insert into Student(id,name,age,address) values(#id#,#name#,#age#,#address#)
		<!-- 返回自動增長值 -->
		<selectKey resultClass="String" keyProperty="id">
			select @@identity as inserted
		</selectKey>
	</insert>
	<delete id="deleteStudentByID" parameterClass="String">
		delete from student where id = #id#
	</delete>
	<delete id="deleteStudent" parameterClass="Student">
		delete from Student where id = #id#
	</delete>
	<update id="updateStudent" parameterClass="Student">
		update student set name=#name#,age=#age#,address=#address# where id = #id#
	</update>
	<!-- 模糊查詢，使用$代替#。此種方法就是去掉了類型檢查，使用字符串連接，不過可能會有sql注入風(fēng)險-->
	<select id="selectByLike" parameterClass="String" resultClass="Student">
		select * from student where name like '%$name$%'
	</select>
	<!-- 多條件組合查詢 -->
	<!-- 方法一(對象構(gòu)造查詢參數(shù)) -->
	<!-- 項目中在寫ibatis中的sql語句時，where user_id in (#user_id_list# )，運行時總是不行，這里不該用#，而應(yīng)該用$，區(qū)別如下：
		1.#是把傳入的數(shù)據(jù)當(dāng)作字符串，如#user_id_list#傳入的是1,2,則sql語句生成是這樣，in ('1,2') ,當(dāng)然不可以
		2.$傳入的數(shù)據(jù)直接生成在sql里，如#user_id_list#傳入的是1,2,則sql語句生成是這樣，in(1,2) 這就對了． 
		3.#方式能夠很大程度防止sql注入． 
		4.$方式無法方式sql注入． 
		5.$方式一般用于傳入數(shù)據(jù)庫對象．例如傳入表名. 
		6.一般能用#的就別用$. 
		直觀的說 
		#str# 出來的效果是 'str' 
		$str$ 出來的效果是 str 
		另外 ##只能用在特定的幾個地方 $$可以用在任何地方 比如 order by $str$ 
		你甚至可以直接寫 $str$ 把 order by 這個字串放在str里傳進(jìn)來 -->
	<select id="findByCon1" parameterClass="Student" resultClass="Student">
		select * from student where name like '%$name$%' and age >= #age#
	</select>
	<!-- 方法二(map封裝查詢參數(shù)) -->
	<parameterMap class="java.util.HashMap" id="paramMap">
		<parameter property="name"/>
		<parameter property="age"/>
	</parameterMap>
	<select id="findByCon2" parameterMap="paramMap" resultClass="Student">
		select * from student where name like ? and age >= ?
	</select>
</sqlMap>

package com.ligang;
import java.io.IOException;
import java.io.Reader;
import java.sql.SQLException;
import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import com.ibatis.common.resources.Resources;
import com.ibatis.sqlmap.client.SqlMapClient;
import com.ibatis.sqlmap.client.SqlMapClientBuilder;
public class StudentDaoImpl implements StudentDao {
	public static SqlMapClient sqlMapClient = null;
	static{
		try {
			Reader reader = Resources.getResourceAsReader("com/ligang/SqlMapConfig.xml");
			sqlMapClient = SqlMapClientBuilder.buildSqlMapClient(reader);
		} catch (IOException e) {
			e.printStackTrace();
		}
	}
	public List<Student> findAll() {
		List<Student> list = null;
		try {
			list = sqlMapClient.queryForList("findAll");
		} catch (SQLException e) {
			e.printStackTrace();
		}
		return list;
	}
	public Student findByID(String id){
		Student student = null;
		try {
			 student = (Student) sqlMapClient.queryForObject("findByID", id);
		} catch (SQLException e) {
			e.printStackTrace();
		}
		return student;
	}
	public void addStudent(Student student){
		try {
			sqlMapClient.insert("insertStudent",student);
		} catch (SQLException e) {
			e.printStackTrace();
		}
	}
	public void deleteStudentByID(String id){
		try {
			sqlMapClient.delete("deleteStudentByID",id);
		} catch (SQLException e) {
			e.printStackTrace();
		}
	}
	public void deleteStudent(Student student){
		try {
			sqlMapClient.delete("deleteStudent",student);
		} catch (SQLException e) {
			e.printStackTrace();
		}
	}
	public void updateStudent(Student student){
		try {
			sqlMapClient.update("updateStudent", student);
		} catch (SQLException e) {
			e.printStackTrace();
		}
	}
	public List<Student> findByCon(String name){
		List<Student> stuList = new ArrayList<Student>();
		try {
			stuList = sqlMapClient.queryForList("selectByLike",name);
		} catch (SQLException e) {
			e.printStackTrace();
		}
		return stuList;
	}
	public List<Student> findByCon(Student student){
		List<Student> stuList = new ArrayList<Student>();
		try {
			stuList = sqlMapClient.queryForList("findByCon1",student);
		} catch (SQLException e) {
			e.printStackTrace();
		}
		return stuList;
	}
	public List<Student> findByCon(Map map){
		List<Student> stuList = new ArrayList<Student>();
		try {
			stuList = sqlMapClient.queryForList("findByCon2",map);
		} catch (SQLException e) {
			e.printStackTrace();
		}
		return stuList;
	}
}