Is it possible to escape a user input for a LIKE operator?

[muturgan]

I need a some sort of query like this:

`SELECT * FROM my_table WHERE name LIKE '%${ userInput }%'`

If I will use a ? placeholder and pass a second param to the query with a userInput then the generated sql will be broken

`SELECT * FROM my_table WHERE name LIKE '%'Mike'%'`

Is it possible to escape a user input for a LIKE operator with a built in mysql2 tools?

[muturgan]

As I can see a user input is still unsafe

[muturgan]

I like an answer from SO - using position instead of like:

`SELECT * FROM my_table WHERE POSITION(? IN name) > 0',
[ userInput ]