CREATE PROCEDURE querydata @wherestr varchar(8000) AS exec('select*from table1 where '+@wherestr+'') GO
CREATE PROCEDURE querydata @wherestr varchar(8000) AS exec('select * from table1 where name=''john''') GO或: CREATE PROCEDURE querydata @wherestr varchar(8000) AS exec('select * from table1 where name='+char(39)+'john'+char(39)) GO
大哥,都说不能拆开name='john'
CREATE PROCEDURE querydata @wherestr varchar(8000) AS exec('select*from table1 where '+Replace(@wherestr,char(39),char(39)+char(39)) GO
replace('控件生成的','''','''''')
@wherestr varchar(8000)
AS
exec('select*from table1 where '+@wherestr+'')
GO
@wherestr varchar(8000)
AS
exec('select * from table1 where name=''john''')
GO或:
CREATE PROCEDURE querydata
@wherestr varchar(8000)
AS
exec('select * from table1 where name='+char(39)+'john'+char(39))
GO
@wherestr varchar(8000)
AS
exec('select*from table1 where '+Replace(@wherestr,char(39),char(39)+char(39))
GO
exec querydata "name='john'"