SQL LIKE treating a PHP variable as a string

Question

I am trying to search for a email with the same domain in a mysql database using using SQL LIKE as in

$search=$_POST['searchTickets'];
$from=$_POST['fromm'];
$to=$_POST['too'];

$q=mysqli_query($conn,"select * from mytickets WHERE email LIKE '%$search' AND dt BETWEEN '$from' AND '$to' ");

Although the $search have a string (example mydomain.com) that correspond to values found in mytickets table, email column (example [email protected]), the mysqli_query keep returning zero results.

And somehow when I replace email LIKE '%$search' with email LIKE '%mydomain.com' it return the result I'm looking for. could it be sql is taking $search in '%$search' as a string? if so whats the right way to make SQL take it as PHP variable?

It looks like you want to directly build in send data into your SQL. This is an security vulnerability. More infos about SQL injection can be found on Wikipedia — Henrik
– Henrik, Commented Aug 9, 2018 at 9:36
It is possible that $search does not include the right value. — Henrik
– Henrik, Commented Aug 9, 2018 at 9:40
You right, $search was picking up the wrong value. Thanks alot. — IamNatangwe
– IamNatangwe, Commented Aug 9, 2018 at 9:56

jcjr · Accepted Answer · 2018-08-09 09:26:30Z

1

One of possible solutions:

$q=mysqli_query($conn,"select * from mytickets WHERE email LIKE '%".$search."' AND dt BETWEEN '$from' AND '$to' ");

answered Aug 9, 2018 at 9:26

jcjr

1,50125 silver badges40 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

IamNatangwe Over a year ago

Still returning zero results, any other possible solution?

jcjr Over a year ago

Is the rest of the condition ok? I suggest you add line echo $q; and check the statement, if it is ok. You can try to run it directly in phpmyadmin, or post it here.

Collectives™ on Stack Overflow

SQL LIKE treating a PHP variable as a string

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related