How to execute parameterized SQL query (using LIKE with @ variable)

Question

I want to do select query with input from user, what is the correct syntax of LIKE to use, where I should set % in the first line or second?

var areaName = "SELECT AOIId FROM dbo.AreaOFInterest WHERE AOIName LIKE @AOIName ";
db.Database.ExecuteSqlCommand(areaName, @searching);

This is about your programming language, where you're trying to invoke this, not about sql. — IVNSTN
– IVNSTN, Commented Feb 17, 2018 at 15:34

Dan Guzman · Accepted Answer · 2018-02-17 15:15:52Z

1

If you want to search for all names starting with the specified characters, specify LIKE @AOIName + '%'. For all name containing the string, specify LIKE '%' @AOIName + '%'.

You may also want to escape LIKE wildcards within the provided search string so that these are treated as literals:

var aoiNameParameterValue = AOIName.Replace("[", "[[]").Replace("%", "[%]").Replace("_", "[_]").Replace("^", "[^]");

answered Feb 17, 2018 at 15:15

Dan Guzman

46.8k3 gold badges52 silver badges77 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Sema Over a year ago

Thanks but what you mean by replace?

Dan Guzman Over a year ago

I mean enclose wildcard characters within the search string in square brackets. I used the String.Replace method in my code example to do that.

Collectives™ on Stack Overflow

How to execute parameterized SQL query (using LIKE with @ variable)

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related