How to use Parameter Query for SQL IN staetement

shine · #1 (**permalink**) 03-11-04, 20:09

I run into a problem to use prameter query for IN statement
Declare @bID varchar(20)
set @bID='1,2'
SELECT * FROM test WHERE ID IN(@data)

Is there a solution?

ClaireHsu · #2 (**permalink**) 03-11-04, 21:03

You are almost there

Declare @bID varchar(20)
set @bID='1,2'
print('SELECT * FROM a WHERE ID IN('+@bid+')')
exec('SELECT * FROM a WHERE ID IN('+@bid+')')

shine · #3 (**permalink**) 03-12-04, 12:51

Thank you for providing a walk around.
The purpose to use parameter query is to avoid SQL Injection security hole. By exec a sql statement will run into this problem.

Internet Services

Web Development

Digital Marketing

Consumer Tech