Found an example here:
Briefly, you want to call getBoundSql() on the statement. In that page, ignore the suggestion to use ${param} instead of #{param}. The former does text substitution instead of SQL parameters, which is not secure - SQL injection - and not advisable.
--
You received this message because you are subscribed to the Google Groups "mybatis-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
[hidden email].
To view this discussion on the web visit
https://groups.google.com/d/msgid/mybatis-user/ema1d131eb-d044-46d0-a3b6-33ddf61f41fa%40asus.