Cannot use Like statement in Android SQLite with argument and % character

Question

Caused by: java.lang.IllegalArgumentException: Cannot bind argument at index 1 because the index is out of range. The statement has 0 parameters.

Android doesn't recognise ? character in ?%

I try to achieve this:

 String selectQuery = "SELECT * FROM config WHERE Directory Like '?%';";

 SQLiteDatabase db = this.getReadableDatabase();
 Cursor cursor = db.rawQuery(selectQuery, new String[] {parent});

I have searched for a solution but couldn't find anything, I think it's pretty particullary. I am trying to do it like this because I want to make the query work with Strings that contains character '.

Maybe someone who had the same problem can answer me how can I solve this.

Lukasz Szozda · Accepted Answer · 2015-11-08 09:38:14Z

8

Use || to concat parameter and wildcard:

SELECT * FROM config WHERE Directory Like ? || '%';

edited Nov 8, 2015 at 9:38

answered Nov 8, 2015 at 9:35

Lukasz Szozda

181k26 gold badges278 silver badges326 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Marian Pavel Over a year ago

Still doesn't work :( same error "SELECT * FROM config WHERE Directory Like '?' || '%';"

Lukasz Szozda Over a year ago

@PavelMarian Try without ' around ?

Marian Pavel Over a year ago

Work's like a charm, going to accept the answer after the time limit. Didn't know I could concatenate the strings.

Lukasz Szozda · Accepted Answer · 2015-11-08 09:52:17Z

0

SELECT * FROM config WHERE Directory Like '?' || '%';

SQLiteDatabase db = this.getReadableDatabase();
Cursor cursor = db.rawQuery(selectQuery, new String[] {parent});

using || solves this issue

edited Nov 8, 2015 at 9:52

Lukasz Szozda

181k26 gold badges278 silver badges326 bronze badges

answered Nov 8, 2015 at 9:38

Sathish Kumar

9571 gold badge14 silver badges27 bronze badges

Comments

karimkhan · Accepted Answer · 2015-11-08 09:39:24Z

-2

you can put what condition you have into a String variable and then pass it to your query like this--> String Condition="'?"; SELECT * FROM config WHERE Directory Like '"+Condition+"'

answered Nov 8, 2015 at 9:39

karimkhan

3294 silver badges18 bronze badges

8 Comments

Lukasz Szozda Over a year ago

And allow SQL Injection attack

karimkhan Over a year ago

@lad2025: there are many ways that you can block SQL Injection attack.

Lukasz Szozda Over a year ago

The first rule is: Avoid building custom string, use parameter binding instead

karimkhan Over a year ago

@lad2025: sometimes you need to do your work in another way. but this do not mean you are mistake. just you are some flexible.

Lukasz Szozda Over a year ago

Good joke exposing to SQL attack Injection for being flexible.

|

Collectives™ on Stack Overflow

Cannot use Like statement in Android SQLite with argument and % character

3 Answers 3

3 Comments

Comments

8 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

3 Comments

Comments

8 Comments

Your Answer

Sign up or log in

Post as a guest

Related