how to include "*" in echo command????

Hi All,

I am doing one simple web tool. I have a HTML as my front end and cgi as my backend. Here my pb is when I assign the html form input to a variable in my script, it is not accepting the special char "*" to that varible.

say I have a text box(Name : in_query) in html and trying to assign the value to a variable in my script like below :

input_query=`echo "${FORM_in_query}"`

Here my in_query --> "select * from order_queue;" (Note : I depends on user input)
but after assigning it to input_query variable I am getting as
---> select bvoip_raw_AVOICS_info.sh bvoip_raw_router_configuration.sh docs giom_bknd iom_report_env iom_report_env.prod scripts sql from order_queue

where "bvoip_raw_AVOICS_info.sh bvoip_raw_router_configuration.sh docs giom_bknd iom_report_env iom_report_env.prod scripts sql" are the output of ls command.......

ap5377@::/export/home/ap5377/iomr31/rpt> ls
bvoip_raw_AVOICS_info.sh giom_bknd scripts
bvoip_raw_router_configuration.sh iom_report_env sql
docs iom_report_env.prod
ap5377@::/export/home/ap5377/iomr31/rpt>

I tried with the following options
1) echo "${FORM_input_query}" | read -r PROCESSED_QUERY
2) PROCESSED_QUERY=`print -r "${FORM_input_query}"`
but these two also not working............ :mad:

pls help to resolve this issue........

#!/bin/ksh

a="select * from  ${USER}"
echo "${a}"