Node MySQL escape LIKE statement
How do escape a MySQL LIKE statement in node-mysql? Something along the lines of "SELECT * FROM card WHERE name LIKE '%" + connection.escape(req.body.search) + "%'" Results in 'SELECT * FROM card WHERE name LIKE \'%\'hello\'%\'' Which is a syntax error. If I use the alternative syntax of connection.query("SELECT * FROM card WHERE name LIKE '%?%'", req.body.search, function () {}); Results in a similar syntax error. I've also tried connection.query("SELECT * FROM card WHERE name LIKE ?", '%' + req.body.search + '%', function () {}); Which just ends up escaping the '%' sign. Not sure why it's