How to escape '&' symbol of Text in SQL WHERE Clause?

Asked Oct 08 '15 at 09:52

Active Oct 08 '15 at 10:04

Viewed 41 times

How to escape '&' dynamically in a text in WHERE clause in SQL. My DB is Oracle. I am trying as below:

public  List getBookingList( String searchText ){

String sql= "  SELECT c.name  FROM customer c  WHERE c.name like ? " ;

List params = new ArrayList();    
params.add("%"+searchText+"%");  
// "searchText" may contain "&",Ex: A&B Beverage Ltd. How to search with it.

return jdbcTemplate.queryForList(sql,params.toArray());

}

edited Oct 08 '15 at 10:04

asked Oct 08 '15 at 09:52

obsolete

Use a `PreparedStatement` and have a look for posts about `SQL injection`. – SubOptimal Oct 08 '15 at 09:55
I have edited the code snippet. Two question marks were written wrongly here. It should be one . – obsolete Oct 08 '15 at 10:05
`&` does not need to be "escaped" – Oct 08 '15 at 12:13
Do u think so? can u show me screenshot of the executed query? – obsolete Oct 13 '15 at 10:18

How to escape '&' symbol of Text in SQL WHERE Clause?

0 Answers0