Question

基于这篇文章： How should I pass a table name into a stored proc?

我编写了一个过程来接受表名，列名和列的值，以检查传递的值是否存在于传递的表和列中。

CREATE PROC spCountAnyTableRows
( 
@PassedTableName as NVarchar(255),
@PassedColumnName as NVarchar(255),
@PassedValue as NVarchar(255)
)
AS
BEGIN
DECLARE @ActualTableName AS NVarchar(255)
DECLARE @ActualColumnName AS NVarchar(255)

SELECT @ActualTableName = QUOTENAME( TABLE_NAME )
FROM INFORMATION_SCHEMA.TABLES
WHERE TABLE_NAME = @PassedTableName

SELECT @ActualColumnName = QUOTENAME( COLUMN_NAME )
FROM INFORMATION_SCHEMA.COLUMNS
WHERE COLUMN_NAME = @PassedColumnName

DECLARE @sql AS NVARCHAR(MAX)
SELECT @sql = 'SELECT COUNT(*) FROM ' + @ActualTableName + ' WHERE ' + @ActualColumnName +' = ' + @PassedValue
PRINT @sql
EXEC(@SQL)
END

但是print语句返回：

SELECT COUNT(*) FROM [AppRoles] WHERE [Name] = Admin

而不是

SELECT COUNT(*) FROM [AppRoles] WHERE [Name] = 'Admin'

如何在下面编辑此行以返回正常的select语句。

SELECT @sql = 'SELECT COUNT(*) FROM ' + @ActualTableName + ' WHERE ' + @ActualColumnName +' = ' + @PassedValue

Answer 1

您可以使用：

SELECT @sql = 'SELECT COUNT(*) FROM ' + @ActualTableName + ' WHERE ' + @ActualColumnName +' = ''' + @PassedValue + ''''

我应该如何将表名，列名和值传递给存储过程

1 个答案: