How to use underscore as literal not as wild char

[cute nonni]

Hello dears,


I'm using oracle and need to use the underscore as literal not as wild char in qurery

I found on the internet something like this

SELECT SAMPLE_NAME FROM SAMPLES WHERE SAMPLE_NAME LIKE 'ABC\_XYZ' ESCAPE '\'

and if there is SAMPLE_NAME equales ABC_XYZ it will be feached


but in my case the string that i compare to is variable(entred by user)

select SAMPLE_NAME FROM SAMPLES WHERE SAMPLE_NAME LIKE ?

Is there any way to disable using '_' as wildchar in general in queris???

or the only solution is to process user input before using it in LIKE statement !

thanks in advance

[Jeanne Boyarsky]

That is still the way to do it. You can use String's replaceAll method in Java to convert the string to have the escape character before submitting.

Your real example probably looks like "like % " + userInput + "%". If it doesn't have the % wildcard, you could just use "field = userInput" and be done with it.

Obviously, you still use a PreparedStatement here. I'm spelling out the input to make it clearer.

[Wendy L Gibbons]

I am sure i read about something in oracle to allow you to set your wildcards, in an old thread.