Concat select query with like %string%

Question

Here is the simplified query that doesn't work.

SET @abc = CONCAT('%','string','%');

SET @query = CONCAT('SELECT * 
FROM table 
WHERE column LIKE ',@abc);

PREPARE stmt FROM @query;
EXECUTE stmt;
DEALLOCATE PREPARE stmt;

I need to use CONCAT with SELECT because there lots of other variables in real query.

Real query works fine when I use some simple COLUMN=xyz in WHERE clause. But nothing works when I try to use LIKE %xyz%...

Let me guess, do you use instead of 'string' another column name? — Lukasz Szozda
– Lukasz Szozda, Commented Oct 20, 2015 at 13:46
The feature you require is "dynamic SQL" - stackoverflow.com/questions/190776/… — Neville Kuyt
– Neville Kuyt, Commented Oct 20, 2015 at 13:47

Arun Krish · Accepted Answer · 2015-10-20 13:57:00Z

1

Use it like this

SET @abc = CONCAT('"%','string','%"');

SET @query = CONCAT('SELECT * 
 FROM table 
WHERE column LIKE ',@abc);

PREPARE stmt FROM @query;
EXECUTE stmt;
DEALLOCATE PREPARE stmt;

Check the first line I have added " to show @abc like "%string%"

answered Oct 20, 2015 at 13:57

Arun Krish

2,1531 gold badge12 silver badges15 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Michael Over a year ago

How does this prevent against SQL injections?

Collectives™ on Stack Overflow

Concat select query with like %string%

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related