[g37752]

$name='john_doe';
$name=str_replace('_','\_',$name);

$sql="select * from table where customer='".$name."'";

in the table, i have john_doe, john_smith, etc.

I am not getting the expected result?

[andrewsw]

You might use

$name=str_replace('_','\\_',$name);

although, is there really a need to escape underscores?

[AdaHacker]

You don't need to escape underscores when doing an equality comparison. Underscores are a single-character wildcard for LIKE comparisons, but that doesn't apply to = comparisons - those are for exact matches, no wildcards supported. So for this particular query, there's no need to escape the underscore at all.

[g37752]

AdaHacker, on 09 January 2013 - 05:47 PM, said:

You don't need to escape underscores when doing an equality comparison. Underscores are a single-character wildcard for LIKE comparisons, but that doesn't apply to = comparisons - those are for exact matches, no wildcards supported. So for this particular query, there's no need to escape the underscore at all.

really? it does not work for me at all without escapes.. thats why i use escape.

[andrewsw]

g37752, on 09 January 2013 - 08:14 PM, said:

really? it does not work for me at all without escapes.. thats why i use escape.

Perhaps the data is being saved with a backslash?! Although, this would be a bit strange, as the backslash would have been treated as the escape-code(?).

How does it look in PHPMyAdmin? You can view the table(s) to look at the raw data.