Breaking News: Grepper is joining You.com. Read the official announcement!

sp_executesql sql

ekkamrit answered on January 18, 2023 Popularity 8/10 Helpfulness 7/10

answer sp_executesql sql

sp_executesql sql

Comment

-- sp_executesql takes in three mandatory parameters: 
-- Declare variables for the query, parameter definition, and parameter values
DECLARE @query NVARCHAR(MAX);
DECLARE @params NVARCHAR(MAX);
DECLARE @product_id INT = 5;

-- Set the query and parameter definition
SET @query = N'SELECT name FROM products WHERE id = @product_id';
SET @params = N'@product_id INT';

-- Execute the dynamic query using sp_executesql
-- The query and parameter definition are passed in as the first and second parameters
-- The value of the product_id parameter is passed in as the third parameter
EXEC sp_executesql @query, @params, @product_id;

-- for output parameter
DECLARE @query NVARCHAR(MAX);
DECLARE @params NVARCHAR(MAX);
DECLARE @output INT
DECLARE @product_id INT = 5;

SET @query = N'SELECT @output = COUNT(*) FROM products WHERE id = @product_id;';
SET @params = N'@product_id INT, @output INT OUTPUT';

EXEC sp_executesql @query, @params, @product_id, @output OUTPUT;
-- prevents SQL injection attacks by properly parameterizing the dynamic SQL

Popularity 8/10 Helpfulness 7/10 Language sql

Source: Grepper

Tags: sql

Link to this answer
Share Copy Link

Contributed on Jan 18 2023

ekkamrit

0 Answers Avg Quality 2/10

sp_executesql sql

Contents

More Related Answers

sp_executesql sql

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.