public class OrderByPageUtils {


    /**
     * 將駝峰命名法轉(zhuǎn)換為下劃線命名法
     *
     * @param camelCaseString 駝峰命名的字符串
     * @return 下劃線命名的字符串
     */
    public static String convertCamelToSnake(String camelCaseString) {
        StringBuilder result = new StringBuilder();
        for (char ch : camelCaseString.toCharArray()) {
            if (Character.isUpperCase(ch)) {
                result.append('_').append(Character.toLowerCase(ch));
            } else {
                result.append(ch);
            }
        }
        return result.toString();
    }

    /**
     * 根據(jù)前端傳遞的字段、排序方向和表別名生成排序 SQL 片段
     *
     * @param sortField     排序字段
     * @param sortDirection 排序方向 ("asc" 或 "desc")
     * @param tableAlias    表別名
     * @return 排序 SQL 片段
     */
    public static String getSortSql(String sortField, String sortDirection, String tableAlias) {
        if (sortField == null || sortDirection == null) {
            return "";
        }

        // 將駝峰命名法轉(zhuǎn)換為下劃線命名法
        String snakeCaseField = convertCamelToSnake(sortField);

        // 過濾排序字段，確保只有字母、數(shù)字和下劃線
        String sanitizedSortField = snakeCaseField.replaceAll("[^a-zA-Z0-9_]", "");
        String sanitizedSortDirection = "asc".equalsIgnoreCase(sortDirection) ? "ASC" : "DESC";

        if (sanitizedSortField.isEmpty()) {
            return "";
        }

        // 加上表別名
        if (tableAlias != null && !tableAlias.isEmpty()) {
            sanitizedSortField = tableAlias + "." + sanitizedSortField;
        }

        return " ORDER BY " + sanitizedSortField + " " + sanitizedSortDirection;
    }
}

List<xxxxVO> selectTableList(@Param("sql") String sql);

<select id = "selectTableList" resultType="xxx.VO">
	select a.id,b.name from data as a
	inner join user as b on a.user_id = b.user_id
	<if test = "sql != null and sql != ''">
		${sql}
    </if>
</select>

// ... 業(yè)務(wù)處理
String sql = OrderByPageUtils.getSortSql(orderField.getSortField(), orderField.getSortDirection(), "a");

// dao
mapper.selectTableList(sql);