Posted by Hilarion on 08/24/05 17:25

> I am trying to pass the following and it keeps giving the same error...
>
> http://www.megamotza.com/cst_hsql.php?firstlogin=Y&abc=sysman&sql=select%20*%20from%20sysuser%20where%20companies%20LIKE'%0002%'%20AND%20usrflag%20='U'&tblname=curSysuser
>
> ...the problem is the LIKE '%0002%'. If I remove the %'s from each side of the value, no error.


The URL you gave is not correct. I suppose you wanted to use this
SELECT statement:

select * from sysuser where companies LIKE'%0002%' AND usrflag ='U'

but for the statement above the URL should look like this:

http://www.megamotza.com/cst_hsql.php?firstlogin=Y&abc=sysman&sql=select%20%2A%20from%20sysuser%20where%20companies%20LIKE%27%250002%25%27%20AND%20usrflag%20%3D%27U%27&tblname=curSysuser

You did not encoded '%' signs to URL form (%25) and this probably
caused the server error. You should also encode '*' sign and single
quotes.


Hilarion

[Back to original message]