多条件查询--使用dapper命令参数动态拼接出最安全的sql语句

publicList<MSys_Admin>GetAdminList(MSys_Admin model){string sqlText ="select count(1) from Sys_Admin where 1=1";var p =newDynamicParameters();if(!string.IsNullOrEmpty(model.LoginName)){sqlText +=" and LoginName like @LoginName";p.Add("LoginName", model.LoginName+"%");}if(!string.IsNullOrEmpty(model.Name)){sqlText +=" and Name like @Name";p.Add("Name","%"+ model.Name+"%");}using(var conn =Common.GetConn()){conn.Open();var r = conn.Query<MSys_Admin>(sqlText, p);conn.Close();return r.ToList();}}