ALTER TABLE my_table ADD @column INT

前端 未结 3 2141
名媛妹妹
名媛妹妹 2020-12-06 17:25

If i want to use a variable as name of the new column, is this posible in MS SQL?

Example that dont work:

ALTER TABLE my_table ADD @column INT
         


        
3条回答
  •  感动是毒
    2020-12-06 17:58

    This is possible using dynamic sql to build your DDL and using the EXEC command to execute the string.

    Declare @SQL VarChar(1000)
    
    SELECT @SQL = 'ALTER TABLE my_table ADD ' + @column + ' INT'
    
    Exec (@SQL)
    

    See this article.

    I will also add that the moment you venture to the land of dynamic sql, you need to take care to not expose yourself to SQL Injection attacks. Always clean up the parameters coming in.

    As Philip mentions - think long and hard before doing this. The fact that it is possible does not make it a good thing...

    Erland Sommarskog wrote an extensive article about using dynamic sql - The curse and blessings of dynamic SQL which I recommend reading fully.

提交回复
热议问题