How to use bindValue with LIKE operator in SQL query?

Question

I've been trying to replace the value in '%:value%' when I use the LIKE operator in my query.

I have also tried using CONCAT() but that didnt work either.

    $query = "SELECT * 
              FROM books
              WHERE title LIKE '%:title%'";
    ...
    ...
    statement->bindValue(':title', $title, PDO::PARAM_STR);

:title should be replaced with the variable $title but it doesnt. The query is working fine but the :title just doesnt get replaced.

Use a ***literal*** `:title` placeholder and `->bindValue(':title', "%$title%"` — mario, Jan 20 '19 at 13:49

score 3 · Accepted Answer · answered Jan 20 '19 at 13:51

3

You probably want :

$query = "SELECT * 
          FROM books
          WHERE title LIKE CONCAT( '%', :title, '%')";
...
...
statement->bindValue(':title', $title, PDO::PARAM_STR);

The bind parameter should be used as a litteral string. CONCAT can be used to concatenate the parameter with percent signs on both ends.

answered Jan 20 '19 at 13:51

GMB

216,147
25
84
135

Thanks. I might have had a typo when I used CONCAT(). – Diar Jan 20 '19 at 16:30

score 0 · Answer 2 · answered Jan 20 '19 at 13:50

0

Did you try using concat() like this?

SELECT * 
FROM books
WHERE title LIKE CONCAT('%', :title, '%')

answered Jan 20 '19 at 13:50

Gordon Linoff

1,242,037
58
646
786

Thanks. I might have had a typo when I used CONCAT(). – Diar Jan 20 '19 at 16:30

How to use bindValue with LIKE operator in SQL query?

2 Answers2