$UploaderID = strval( $_GET[ 'UploaderID' ] );
/// prevent distortion parameter
$ UploaderID = iconv ( "UTF- 8", "GB2312 // IGNORE", $ UploaderID);
//// sql statement
$sql = "SELECT
*
FROM
StandardResources
WHERE
UploaderID
like '%".$UploaderID."%' ";
//// parameter
$ params = array ($ UploaderID) ;