How to execute mysql query with LIKE statement in Django

Question

I am trying to search in my mysql database with LIKE statement :

indexstr = request.GET['index']
indexstr = '%' + indexstr + '%'
offset = int(request.GET['offset'])
for row_data in advertisement.objects.raw(
        'select * from requests_advertisement WHERE short_description LIKE '    + indexstr + ' LIMIT 10 OFFSET ' + str(offset*5)):

But it has this error: Error Image

It seems that it cannot work with % character. When I remove % it works correctly.

The code executing and "working correctly" are two different things. Don't use string concatenation to build your queries, it's an SQL injection risk. — roganjosh
– roganjosh, Commented Mar 10, 2019 at 14:06
I don't know the exact setups here, but something like cursor.execute("""select * from requests_advertisement WHERE short_description LIKE %s""", ('%' + indexstr + '%',)) — roganjosh
– roganjosh, Commented Mar 10, 2019 at 14:08

Daniel Roseman · Accepted Answer · 2019-03-10 14:31:02Z

1

There's no reason to use a raw query here. You need the __icontains lookup:

advertisement.objects.filter(short_description__icontains=request.GET["index"])

answered Mar 10, 2019 at 14:31

Daniel Roseman

602k68 gold badges910 silver badges923 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

A.Risheh Over a year ago

Thanks a lot,it worked ;-), does it have a same performance and speed as a query with like statement.and what about "match() against() query" ?

Collectives™ on Stack Overflow

How to execute mysql query with LIKE statement in Django

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related