How to use SQL wildcards in LINQ to Entity Framework

后端 未结 1 1921
离开以前
离开以前 2020-12-16 05:11

I have a query that looks like this:

IQueryable profiles = from p in connection.Profiles
    where profile.Email.Contains(txtSearch)
    selec         


        
1条回答
  •  猫巷女王i
    2020-12-16 05:54

    I'm not sure that this is possible directly with linq because you can call only basic string functions like Contains, StartsWith or EndsWith. It is possible with Entity SQL so you can combine these approaches.

    var query = new ObjectQuery(
        @"SELECT VALUE p
          FROM CsdlContainerName.Profiles AS p
          WHERE p.Email LIKE '" + wildcardSearch + "'",
        context);
    
    var result = query.AsQueryable().OrderByDescending(p => p.Name).ToList();
    

    ESQL injection strikes back :)

    Second version without injection vulnerability (I didn't try it but it should work):

    var commandText =
        @"SELECT VALUE p
          FROM CsdlContainerName.Profiles AS p
          WHERE p.Email LIKE @search";
    
    var query = new ObjectQuery(commandText, context);
    query.Parameters.Add(new ObjectParameter("search", wildcardSearch));
    
    var result = query.AsQueryable().OrderByDescending(p => p.Name).ToList();
    

    0 讨论(0)
提交回复
热议问题