how pass column name parameter in sql server select statement?
you need build query execute dynamically, need protect against sql injection attacks. fortunately, sql server provides quotename function purpose.
declare @columnname varchar(50) set @columnname = 'mycolumn'  exec('select ' + quotename(@columnname) + ' mytable')      
Comments
Post a Comment