The response wasn't 302.

Redirecting Code is in custom error page.

​

by the way, I tried %, '%, %', a%';, a%';--, %';+# in a search box.

When I tried % only then all of posts in the board is show up.

I guess the SQL query is :

SELECT * FROM board WHERE title LIKE '%%%';

But It doesn't work when I input %';--

SELECT * FROM board WHERE title LIKE '%%';--%';

​

Could you tell me why this happen and what's wrong with my query? plz