Home/ Questions/Q 8091903
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-05T20:10:15+00:00

If someone passes a ‘%’ to a field that compares in my sql with

  • 0

If someone passes a '%' to a field that compares in my sql with su.username LIKE CONCAT('%', email ,'%')) it returns all rows. It ends up looking like su.username LIKE CONCAT('%%%'). Can I get around this in anyway without filtering out the '%'?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I’m assuming you mean you want to escape the % so it matches a literal % instead of anything.

    In that case, you just need:

    ... su.username LIKE CONCAT('%',REPLACE(email,'%','\\%'),'%')
    • 0