為什么這個Dynamic Sql語句失敗了？

Question

這沒有任何問題：

select COLUMN_NAME,DATA_TYPE,CHARACTER_MAXIMUM_LENGTH,IS_NULLABLE 
from [AdventureWorks2012].INFORMATION_SCHEMA.COLUMNS WHERE table_name='employee';

但是，當它轉移到動態語句時，它總是失敗：

begin
DECLARE @sqlstatement VARCHAR(MAX);
DECLARE @TableName varchar(max)='employee';

set @sqlstatement='select COLUMN_NAME,DATA_TYPE,CHARACTER_MAXIMUM_LENGTH,IS_NULLABLE
from [AdventureWorks2012].INFORMATION_SCHEMA.COLUMNS WHERE table_name='+@TableName;
print (@sqlstatement);
EXECUTE(@sqlstatement);

end

錯誤說：無效的列名稱'employee'

Answer 1

你應該用單引號包裝它，因為列table_name是字符串，

set @sqlstatement='select COLUMN_NAME,DATA_TYPE,CHARACTER_MAXIMUM_LENGTH,IS_NULLABLE
from [AdventureWorks2012].INFORMATION_SCHEMA.COLUMNS WHERE table_name='''+@TableName+'''';

Answer 2

使用sys.sp_executesql更希望執行動態SQL，所以試試這個 -

DECLARE @SQL NVARCHAR(MAX);
DECLARE @TableName SYSNAME = 'Employee';

SELECT @SQL = '
USE [AdventureWorks2012];
SELECT 
      COLUMN_NAME = c.name
    , DATA_TYPE = TYPE_NAME(c.user_type_id)
    , CHARACTER_MAXIMUM_LENGTH = c.max_length
    , IS_NULLABLE = c.is_nullable
FROM sys.columns c
JOIN sys.objects o ON c.[object_id] = o.[object_id]
WHERE o.name = ''' + @TableName + '''';

PRINT @SQL;
EXEC sys.sp_executesql @SQL;