The below code will obviously search for similar results as the query variable but what is the SQL command to search for exact results and not "like"?
$query = "SELECT languages.language FROM languages WHERE language LIKE '%".$name."%'";
Asked
Active
Viewed 2,937 times
-4
Mathew Thompson
- 55,877
- 15
- 127
- 148
Noah R
- 5,287
- 21
- 56
- 75
-
3**warning** your code is vulnerable to sql injection attacks. – Daniel A. White Apr 20 '12 at 19:39
-
@Radu: How *do* I assign a value to a variable in PHP? – Robert Harvey Apr 20 '12 at 19:43
-
@RobertHarvey - a better question is how do i *declare* a variable in php? – Daniel A. White Apr 20 '12 at 19:44
2 Answers
5
have you tried the = operator and removing the % wild cards?
Daniel A. White
- 187,200
- 47
- 362
- 445
-
+1: What!? How on earth did you figure that one out!? You're a superstar ;-) – James Johnson Apr 20 '12 at 19:43
1
Edit: Although I answered what you asked, it is worth pointing out, as others have said, that your code is vulnerable to SQL injection attacks :)
For exact matches:
$query = "SELECT languages.language FROM languages WHERE language ='".$name."'";
For non matches:
$query = "SELECT languages.language FROM languages WHERE language <> '".$name."'";
Mathew Thompson
- 55,877
- 15
- 127
- 148
-
1
-
I know, but I just did what he asked, I've put a disclaimer on :) – Mathew Thompson Apr 20 '12 at 19:42