Searching for % sign

[chrischen]

Right now if I type "%" into my search box it returns everything in the databse. How do I escape it so that it searches for that sign?

[toplay]

\%

[Barand]

so to search for a value containing a %

 

 

...WHERE term LIKE '%\%%'

[chrischen]

I tried and it still returns everything.

$query = "%";

 

The sql query is like this sprintf("... WHERE name = %s", GetSQLValueString($query, "text") and I use the GetSQLValueString function:

 

 

function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")

{

  $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;

 

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

 

  switch ($theType) {

    case "text":

      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";

      break;   

    case "long":

    case "int":

      $theValue = ($theValue != "") ? intval($theValue) : "NULL";

      break;

    case "double":

      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";

      break;

    case "date":

      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";

      break;

    case "defined":

      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;

      break;

  }

  return $theValue;

}

[fenway]

I see no escaping.