The PHP development language provides you with a "prepare" function to send a prepared statement to a SQL database. You can use full, inline SQL statements in the prepared statement function or send ...
You can't use wildcards in statements like you want. The easiest way for you to do what you want is to just grant the user the db_datareader role and make sure they're not part of a group with the ...
Well, if you happen to be using Sql Server you can do that sort of thing in T-Sql. In Oracle, you can also accomplish the same thing using pl/sql. Either way i'd do it in a stored ...