Question

I have web search form, When i submit my search in the search box,
The result are returned but with contains % in the file name.
for example. the original file name is abc.jpeg, so the result returned will be a%bc.
or if a folder is found with, so its the same for the folder name.
if a folder name is jack, in the result it will be ja%ck.
I have the text box (as a search box, and i have set the value of the search text box as) <%search text%>
Thanks for the help and taking time to read it.
I am using Asp.net, C# and Access DB.

code :

iscBuilder.AddSelect("* ");
        iscBuilder.AddFrom("[table1] ");
        iscBuilder.AddWhereClause("( column_name like('%" + pQuery + "%') or column_name like('%" + pQuery + "%') or column_name like('" + pQuery + "%') or column_name like('" + pQuery + "%') )");
        iscBuilder.AddWhereClause("(column_name like( '" + path + "') or column_name like( '" + path + "')) order by column_name");
        OleDbConnection sqlconConnection = (OleDbConnection)DatabaseConnection.Instance.GetConnection();
        OleDbCommand sqlcmdCommand1 = new OleDbCommand(iscBuilder.ToString(), sqlconConnection);
        sqlcmdCommand1.CommandType = CommandType.Text;
This is how i call the function:    public XmlDocument GetSearchResults(string pQuery, string path,int from , int to)
    {
        List <T> ts= T.GetF().Getresult(pQuery, path);

        return createXMLThumnails(thmbNails,from , to);

    }

Have nice day

Answer 1

Try using a parameterised query or stored procedure to get your data – all this joining strings to make SQL statements is very fiddly and problematic.

Have a look at using Parameterised Queries or Stored Procedures.