Howto? Parameters and LIKE statement SQL Howto? Parameters and LIKE statement SQL asp.net asp.net

Howto? Parameters and LIKE statement SQL


Well, I'd go with:

 Dim cmd as New SqlCommand( "SELECT * FROM compliance_corner"_  + " WHERE (body LIKE @query )"_   + " OR (title LIKE @query)") cmd.Parameters.Add("@query", "%" +searchString +"%")


Your visual basic code would look something like this:

Dim cmd as New SqlCommand("SELECT * FROM compliance_corner WHERE (body LIKE '%' + @query + '%') OR (title LIKE '%' + @query + '%')")cmd.Parameters.Add("@query", searchString)


you have to do:

LIKE '%' + @param + '%'