concatenation - Concatenate variable in a query - SQL Server 2008 -
my question basic.
i creating stored procedure , have following variable:
@concatenarclausulawhere
during execution of procedure, several conditions concatenated in variable inserted after where:
select id table1 indstatus = 'true' , (description '%' + @ string + '%')
my intention like:
select id table1 indstatus = 'true' , (description '%' + @ string + '%') + @ concatenarclausulawhere
but, not possible. why?
i using sql server 2008
you need dynamic sql append where
clause query. select
statement not string. need wary of sql injection here. how validating users entering clause parameter?
declare @sql nvarchar(max) = n'select id dbo.table1 indstatus = ''true'' , (description @string)' + @concatenarclausulawhere; exec sp_executesql @sql, n'@string nvarchar(max)', n'%' + @string + '%';
Comments
Post a Comment