How to pass column name as parameter in select statement SQL Server -


how pass column name parameter in sql server select statement?

you need build query execute dynamically, need protect against sql injection attacks. fortunately, sql server provides quotename function purpose.

declare @columnname varchar(50) set @columnname = 'mycolumn'  exec('select ' + quotename(@columnname) + ' mytable') 

Comments