escape input for mysql server

[tpf80]

One last question I notice that:

#
query.prepare("select userid, username, firstname, lastname, email, status from user where username=:username");
#
query.bindValue(":username", login.username);

#
query.prepare("select userid, username, firstname, lastname, email, status from user where username=:username");
#
query.bindValue(":username", login.username);

To copy to clipboard, switch view to plain text mode 

Pretty much escapes the login.username, puts it in quotes, and inserts it where :username is. However how do I use bindValue() with queries using "like" for example:

query.prepare("select userid, username, firstname, lastname, email, status from user where username like \"%" + something + "%\"");

query.prepare("select userid, username, firstname, lastname, email, status from user where username like \"%" + something + "%\"");

To copy to clipboard, switch view to plain text mode 

it doesn't seem that

query.prepare("select userid, username, firstname, lastname, email, status from user where username like \"%:something%\"");
query.bindValue(":something", somevariable);

query.prepare("select userid, username, firstname, lastname, email, status from user where username like \"%:something%\"");
query.bindValue(":something", somevariable);

To copy to clipboard, switch view to plain text mode 

works properly. (gives an error preparing the query). What is the proper way to use bindvalue with a "like" query?

[jacek]

What is the proper way to use bindvalue with a "like" query?

Try:

SELECT userid, username, firstname, lastname, email, STATUS
FROM user
WHERE username LIKE '%' || :something || '%'

select userid, username, firstname, lastname, email, status
from user
where username like '%' || :something || '%'

To copy to clipboard, switch view to plain text mode 

or

query.bindValue(":something", "%" + somevariable + "%" );

query.bindValue(":something", "%" + somevariable + "%" );

To copy to clipboard, switch view to plain text mode