DbParameter on invalid arguments for like query

Fuzzy query Searchname with the method of transmitting parameters

As usual, we will write the code as follows:

However, the result is that the query does not have the results, the tracking code does not find errors, and does not want to use string concatenation (to prevent attack). As a result, SQL execution is tracked, and the problem is that SQL automatically adds single quotes to the parameters.
In fact, in SQL, the like code is parsed as a '% ' Sam '% ', so you don't get the results you want.

Accordingly, we can change the code to:

In this way, you can achieve the desired query results.

DbParameter on invalid arguments for like query