Sqlite Like查询xamarin形式

Question

I'm trying to make a like in xamarin, but what the query returns to me is just a number, I already tested it in DBowser sqlite, and it works, but not here. What will be the mistake?

Query

public Task<Produtos> GetProdutosAsyncBy(String searchField)
{
    string searchNoSpaces = searchField.Replace(" ", "%");
    var get_docnumb = database.ExecuteScalarAsync<Produtos>("SELECT *" +
                      " FROM Produtos WHERE Design LIKE '%" + searchNoSpaces + "%'");

    return get_docnumb;   
}

Call Query

public async void SearchProdutoQuery ()
{
    var qwe = App.Database.GetProdutosAsyncBy(searchBar_produtos.Text).Result;
}

Answer 1

You can use Scalar to return something as below:

public int GetCountProdutosAsyncBy(String searchField)
{

    string searchNoSpaces = searchField.Replace(" ", "%");
    var get_docnumb = database.ExecuteScalarAsync<Produtos>("SELECT COUNT(*) FROM Produtos WHERE Design LIKE '%" + searchNoSpaces + "%'");

    return get_docnumb;

}

But to solve your problem you can't use Scalar, you need to QUERY and to avoid SQL injection you should use parameter:

public Task<Produtos> GetProdutosAsyncBy(String searchField)
{

    string searchNoSpaces = searchField.Replace(" ", "%");
    var get_docnumb = database.Query<Produtos>("SELECT * FROM Produtos WHERE Design LIKE ?", "%" + searchNoSpaces + "%");

    return get_docnumb;

}