In MyBatis, you mark the places where parameters should be inserted into your SQL like so:
SELECT * FROM Person WHERE id = #{id}
In mybatis annotation @Select
for SQL server "... LIKE '%' + #{param} + '%' ..."
for ORACLE "... LIKE '%' || #{param} || '%' ..."
ref : https://mybatis.org/mybatis-3/java-api.html