Plz Help me Oracle stored procedure for doing wildcard search

Question

Hi. I am creating a search page and using a dynamic query. I plan to allow users to perform wildcard search on a bunch of fields. So, if someone enters 123 or 12* or *12 as the Airbill Id, I want my stored procedure to look for the * and do a wild card search, if not, just do an exact match. Please Suggest me!! Thanks in Advanced.

Vijaya Kadiyala · Answer

Hi When you are implementing wild card search make sure that you dont end up giving an option to do SQL Injection attack. Thanks -- Vijaya Kadiyala www.DotNetVJ.Com

akhil · Answer

hey in oracle use %(percentage) for any number of characters instead of * and _(underscore) for single char