Incorrect syntax due SQL query execution

Question

I'm trying to execute next query

DECLARE @ponumber varchar(50)
DECLARE @gcas varchar(50)
SET @ponumber = '3864_ab03963'
SET @gcas = '81332119.'
EXEC(N'SELECT * FROM tCleanOrderTracking_prod 
       WHERE [PO number] = ' + @ponumber + ' AND [GCAS] = ' + @gcas)

And I've got an error message

Msg 102, Level 15, State 1, Line 1
Incorrect syntax near '_ab03963'.

What I'm doing wrong?

What you are doing is very dangerous. You should use prepared statements with parameters. — Sergey Kalinichenko
– Sergey Kalinichenko, Commented Jul 17, 2012 at 10:49

Alberto De Caro · Accepted Answer · 2012-07-17 10:38:09Z

2

You have to close the single quote after the @gcas parameter.

answered Jul 17, 2012 at 10:38

Alberto De Caro

5,2139 gold badges50 silver badges77 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Vishwanath Dalvi · Accepted Answer · 2012-07-17 10:41:49Z

1

Try this you missed ' near @gcas.

DECLARE @ponumber varchar(50)
DECLARE @gcas varchar(50)
SET @ponumber = '3864_ab03963'
SET @gcas = '81332119.'
EXEC(N'SELECT * FROM tCleanOrderTracking_prod 
       WHERE [PO number] = ' + @ponumber + ' AND [GCAS] = ' + @gcas + ')

answered Jul 17, 2012 at 10:41

Vishwanath Dalvi

36.9k41 gold badges128 silver badges156 bronze badges

Comments

ravnur · Accepted Answer · 2012-07-17 10:40:59Z

1

You should enclose with quotes your all string parameters, For example:

quote(@gcas) instead of simple @gcas

answered Jul 17, 2012 at 10:40

ravnur

2,85223 silver badges28 bronze badges

Collectives™ on Stack Overflow

Incorrect syntax due SQL query execution

3 Answers 3

Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related