SQL Like And Single Quotes

[mickjav]

I have found while testing a search system, If I use a single quote with the below I get a error.

is there another way of doing the below so I can use single quotes

Code Select Expand

$record = $smcFunc['htmlspecialchars']($_REQUEST['search'],ENT_QUOTES);


switch ($_REQUEST['Search_by'])
{
case '1':
$searchby = ' LIKE "' . $record . '%"';
break;

default:
$searchby = ' LIKE "%' . $record . '%"';
break;
}
mick

[Doug Heffernan]

If I use a single quote with the below I get a error.

What error are you getting?

[mickjav]

If I use a single quote with the below I get a error.

What error are you getting?

No direct access...

You can see for yourself using below on my test forum
https://www.databasedreams.co.uk/testing/index.php?action=music;area=artists;sa=recsearch