[#10070] Use :LIKE criteria instead of building a string

Note that %, _, [ no longer get escaped.