开发者

Search returns no rows in mysql query using LIKE and values having "\"

开发者 https://www.devze.com 2022-12-16 19:36 出处:网络
I have some problem regarding the search in mysql. Below is my query. SELECT * FROM table WHERE name LIKE \"%admin\\\'s%\";

I have some problem regarding the search in mysql. Below is my query.

SELECT * FROM table WHERE name LIKE "%admin\'s%";

When i am executing this query it will return zero data.

actually i have "admin\'s" stored in db. this "\" is to prevent sql injection. i have used mysql_real_escape_string to prevent the sql injection.

but when i use three times addslashes to my variable it works.

So my below query is working.

SELECT * FROM table WHERE name LIKE "%admin\\\\\\\'s%";

My above query will return the 开发者_开发知识库data with name like admin's.

I am not getting where i am wrong.


well for one you shouldnt have data like this in your DB admin\'s .. most likely you double escaped your string ( check if you don't have magic_quotes enabled on your server ).

If you only do

INSERT ... username = "admin\'s";

you will have in your db the username value admin's so my recomandation would be to go ahead and remove the slashes from your database and then your first query should work.

0

精彩评论

暂无评论...
验证码 换一张
取 消