convert mysql stored procedure to mssql
-
05-07-2019 - |
Question
I need to used dynamic order query in mysql and i have successfully achieved that through string concatenation in mysql as follows:
set @stmt_text := concat('select * from abc order by ',sorder);
prepare stmt_handle from @stmt_text;
execute stmt_handle;
deallocate prepare stmt_handle;
i need a similar way to convert this in mssql
Any ideas??
Solution
Yes, just run it like this:
execute ('select * from abc order by ' + @sorder);
But don't forget that you need to verify the sorder variable if you get it through user input (to stop sql-injections)
Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow