php - my SQL Like query in spaced variable -

in table postcode insert ze2 9ee space between post code .

in user search , enter correct format postcode ze2 9ee work fine in like query . if user enter postcode without space ze29ee query not working .

the below query not working .

$pcode='ze29ee'; select * postalscheme  postcode '%$pcode%' 

this should trick:

"select *   postalscheme   replace(postcode, ' ', '')     '%" . str_replace(" ", "", $pcode) . "%'" 

this match codes regardless on how many , user places spaces.

also, should escape user input avoid sql injection attack.