I Need some database coding help

[hessu]

v$ = "%" + InputRequester("", "Enter Nutritiongroup:", "") + "%"

DatabaseQuery(1, "SELECT * FROM Food where Nutritiongroup Like '" +v$+ "' " ) , This one is good

DatabaseQuery(1, "SELECT * FROM Food where Nutritiongroup = '" +v$+ "' ") , This one is NOT good, I get none record.

Please help !

[infratec]

Hi,

= means: exactly identical as

But you have % as head and tail.
It can not fit exactly.

Bernd

[normeus]

don't include % inside v$

Code: Select all

v$ = InputRequester("", "Enter Nutritiongroup:", "") 

DatabaseQuery(1, "SELECT * FROM Food where Nutritiongroup Like '%" +v$+ "%' " ) ;  % here

DatabaseQuery(1, "SELECT * FROM Food where Nutritiongroup = '" +v$+ "' ") ; % NOT here

Norm.

[hessu]

Thank you for good advice.

[Marc56us]

If you want to be more secure (avoid code injection)
and let user input string with: " and/or '
use labels (with SetDatabaseString etc)

Code: Select all

; Normal query
v$ = InputRequester("", "Enter Nutritiongroup:", "")

SetDatabaseString(1, 0, v$)

DatabaseQuery(1, "SELECT * FROM Food where Nutritiongroup = ? ") 


; Like query
v$ = "%" + InputRequester("", "Enter Nutritiongroup:", "") + "%"

SetDatabaseString(1, 0, v$)

DatabaseQuery(1, "SELECT * FROM Food where Nutritiongroup Like ? ") 

So long Chr(34) and ' "+ +" ' to make SQL strings

Thank's Falsam (french forum) for this reminder of PB possibilities.