You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'ssion(prompt(945602))\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\''bad=\\\\\\\\\\\\\\\\&am' at line 1 SQL query : SELECT COUNT(DISTINCT p.productID) FROM SS_products p   where categoryID>1 and enabled=1 and  ( LOWER(name) LIKE '%the\\\\\\\\\\\\\\\\"style=\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\''acu:expre/**/ssion(prompt(945602))\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\''bad=\\\\\\\\\\\\\\\\">%' /* OR    LOWER(product_code ) LIKE '%the\\\\\\\\\\\\\\\\"style=\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\''acu:expre/**/ssion(prompt(945602))\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\''bad=\\\\\\\\\\\\\\\\">%' OR    LOWER(description) LIKE '%the\\\\\\\\\\\\\\\\"style=\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\''acu:expre/**/ssion(prompt(945602))\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\''bad=\\\\\\\\\\\\\\\\">%' OR    LOWER(brief_description) LIKE '%the\\\\\\\\\\\\\\\\"style=\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\''acu:expre/**/ssion(prompt(945602))\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\''bad=\\\\\\\\\\\\\\\\">%' */)