PDO / Php Problem with LIKE statement and special characters

Question

I've already checked answers to questions like this one (How do I create a PDO parameterized query with a LIKE statement in PHP). I've ended up to this solution:

$sql  = "SELECT count(*) ".
        "FROM avs_souscript ".
        "WHERE num_certif =\"\" ".
        "AND date_annul=\"\" ".
        "AND user=:sess_user ".
        "AND user!=\"\" ".
        "AND num_certif LIKE CONCAT('%',:num_certif_search,'%')";
$valeur = 'azert';
$stmt = $pdo->prepare($sql);
$stmt->bindValue(':num_certif_search', $valeur);

This works, but here is my problem: how do I handle the '%' char? (i.e. $valeur = '%'; returns all the rows)?

Answer 1

You need to escape the % character,

  $valeur = '\%';