Cannot perform an SQL LIKE whilst escaping strings

[ashtonhylton]

I am trying to perform the query below, where there is a bug when trying to search the DB using LIKE '% %' whilst trying to escape the string also.

$result = $db->query("SELECT * FROM table_name WHERE county LIKE '%%s%'", $location);

This also fails when concatenating.

WHERE county LIKE '%". $location ."%'"

[skegel13]

Try escaping the entire string with the % marks included. So $location = '%' . $location . '%';