$name=param("name"); $name=~s/ /%/g; $sql="select * from table where name like "%$name%";