Help With SQL 'Like' Operator - Programmers Heaven

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Categories

Help With SQL 'Like' Operator

amanuelamanuel Posts: 29Member
I am using Vb.net and MS Access database to search for a text similar entered by the user ,
Dim strSelectName As String = "SELECT * FROM tblNames WHERE [name] LIKE % " & txtExecuter.Text & " % "

but it seems I am using the wrong expression,any help plz.

Comments

  • JonathanJonathan Posts: 2,914Member
    You need to single-quote the string you're trying to match...

    Dim strSelectName As String = "SELECT * FROM tblNames WHERE [name] LIKE '%" & txtExecuter.Text & "%'"

    You also need to call something on txtExecuter.Text to escape any special characters (like quotes) in it too, if this code is for real-world use and you're not already validating it in a way that excludes that. Otherwise you've got an SQL Injection security hole. :-)

    Jonathan
    ###
    for(74,117,115,116){$::a.=chr};(($_.='qwertyui')&&
    (tr/yuiqwert/her anot/))for($::b);for($::c){$_.=$^X;
    /(p.{2}l)/;$_=$1}$::b=~/(..)$/;print("$::a$::b $::c hack$1.");
Sign In or Register to comment.