需要动态SQL帮助

Question

我有一个动态SQL语句，该语句会生成一系列update语句，但不会将值包含在set子句和where子句中，并将其括在单引号中。 有谁知道如何解决这个问题？ 这是我的代码。

  Declare @OldSSN VARCHAR(9)
  Declare @NewSSN VARCHAR(9)
  Declare @cmd   VARCHAR(MAX)
  Set @OldSSN='000000000'
  Set @NewSSN='000000001'

Select @cmd =  COALESCE(@cmd,'') +
'
   UPDATE ' + TABLE_NAME + ' SET ' + Column_Name + ' = ' + @NewSSN + '  
   WHERE ' + Column_Name + ' = ' + @OldSSN +'
'

  From INFORMATION_SCHEMA.COLUMNS
 Where Column_Name like 'SSN%'       
 OR Column_Name LIKE 'ssn%'          
 OR Column_Name LIKE 'ssn%'          
 OR Column_Name LIKE '%_ssn%'            
 OR Column_Name LIKE '_ocsecno'          
 OR Column_Name LIKE 'Ssn%';

 Select @cmd

执行时输出

    UPDATE appl_view 
    SET    ssn = 000000001 
    WHERE  ssn = 000000000

  UPDATE ap_paid 
  SET    ssn = 000000001 
  WHERE  ssn = 000000000 

我试图弄清楚如何将ssn值括在单引号中，如下所示

    UPDATE appl_view 
    SET    ssn = '000000001' 
    WHERE  ssn = '000000000' 

  UPDATE ap_paid 
  SET    ssn = '000000001' 
  WHERE  ssn = '000000000'

Answer 1

使用三重单引号将引号传递给字符串

选择@cmd = COALESCE（@cmd，''）+'UPDATE'+ TABLE_NAME +'SET'+ Column_Name +'='''+ @NewSSN +''''
在哪里'+ Column_Name +'='''+ @OldSSN +''''

Answer 2

我假设您将在某个时候执行此动态sql？ 如果是这样，则可以使用sp_executesql的参数功能，而不必担心引用。 （但是，您必须使用nvarchar ）。

这是一个简单的例子。

---------------------------------------------------------------------------
-- Create a table to test against
---------------------------------------------------------------------------
CREATE TABLE TestTable
(
    TestTableID INT IDENTITY,
    Text1   VARCHAR(10)
);

---------------------------------------------------------------------------
-- Seed the table
---------------------------------------------------------------------------
INSERT INTO TestTable        
VALUES  ( '000000000');
INSERT INTO TestTable        
VALUES  ( '000000003');
INSERT INTO TestTable        
VALUES  ( '000000004');

---------------------------------------------------------------------------
-- Make and execute dynamic sql
---------------------------------------------------------------------------
DECLARE @cmd    NVARCHAR(100),
        @SqlParms NVARCHAR(100);    

SET @cmd = N'UPDATE TestTable SET Text1 = @NewSSN  WHERE Text1 = @OldSSN';
SET @SqlParms = N'@NewSSN varchar(9), @OldSSN varchar(9)';  

EXECUTE sp_executesql @cmd, @SqlParms, @NewSSN = N'000000001', @OldSSN = N'000000000';

---------------------------------------------------------------------------
-- Result should have updated the first row from '000000000' to '000000001'
---------------------------------------------------------------------------
SELECT * FROM TestTable;

Answer 3

Select @cmd =  COALESCE(@cmd,'') +
'
   UPDATE [' + TABLE_NAME + '] SET [' + Column_Name + '] = ''' + @NewSSN + '''  
   WHERE [' + Column_Name + '] = ''' + @OldSSN + '''
'