使用短小精悍的框架动态拼接出最安全的sql语句——多条件查询

   GetNoticeByToUserID公共列表(搜索搜索)   {//search.userId=3;      字符串sql=" select *从通知ID> 0”;   var参数=new动态参数();         sql +=焙蚑oUserID像@toUserID”;   param.Add (“toUserID”、“%”+ search.userId.ToString () +“%”);      如果(search.ID> 0)   {   sql +=焙蚷d=@ id”;   param.Add (“id”, search.ID);   }   var NoticeState=新列表 ();      NoticeState.AddRange (_workingDB.Query (sql, param) .ToList ());      字符串sql2=" select *从IsReadNotices NoticeID=@noticeID和用户id=@uid”;      foreach (var NoticeState n)   {      IsReadNotice isReadNotices=_workingDB.Query (sql2新{noticeID=n.ID uid=search.userId}) .SingleOrDefault ();   如果(isReadNotices !=null)    {   n.statusMsg=isReadNotices.statusMsg;   n.Remarks=isReadNotices.Remarks;   }      }         返回NoticeState;   }


使用短小精悍的框架动态拼接出最安全的sql语句——多条件查询