You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '1045g/**/orion/**//**/lcd/**//**//**/&am' at line 1 SQL query : SELECT COUNT(DISTINCT p.productID) FROM SS_products p where categoryID>1 and enabled=1 and ( LOWER(name) LIKE '%bq/**//*!308791045g/**/orion/**//**/lcd/**//**//**/"))+as+sdaq+where+9561=9561+order+by+1*/#%' /* OR LOWER(product_code ) LIKE '%bq/**//*!308791045g/**/orion/**//**/lcd/**//**//**/"))+as+sdaq+where+9561=9561+order+by+1*/#%' OR LOWER(description) LIKE '%bq/**//*!308791045g/**/orion/**//**/lcd/**//**//**/"))+as+sdaq+where+9561=9561+order+by+1*/#%' OR LOWER(brief_description) LIKE '%bq/**//*!308791045g/**/orion/**//**/lcd/**//**//**/"))+as+sdaq+where+9561=9561+order+by+1*/#%' */)