SSM框架的sql中参数注入（#和$的区别）

 1 <select id="findUsersByUserName2" resultType="java.util.Map" parameterType="Params">
 2         SELECT
 3             id as uid,
 4             username as uname,
 5             password as pwd,
 6             account as act,
 7             telephone,
 8             idcard,
 9             create_time as createTime,
10             is_delete as isDelete,
11             male,
12             birthday,
13             email,
14             address,
15             update_time as updateTime,
16             teacher_id as teacherId,
17             subject_id as subjectId,
18             age,
19             status,
20             type
21         FROM
22             tz_user
23         WHERE
24             username LIKE '%${username}%'
25         AND `password` = #{password}
26         ORDER BY ${order}
27 </select>