Variable in WHERE Statement

Question

I'm trying to use a variable in WHERE Statement in C# Example: 'Select * from table1 WHERE cod_table1 = contr' (contr is a int variable already declared); But it's not working. What can be done?

Senthilkumar · Answer

Hi Camila, Usually in sql server the where condition will be applied like this. If it is int column then SELECT * FROM table1 WHERE cod_table1 = 10 If it is varchar/char/text then SELECT * FROM table1 WHERE cod_table1='test' Similarly when you pass from the front end then int contr = 10; string sqlQuery = "SELECT * FROM table1 WHERE code_table1="+contr.ToString(); Hope this will help you to solve the issue.

Senthilkumar · Answer

Yes sam, you are right!. The inline query always not best practice to do. Better go for parameterized or stored procedure. The inline query will lead into sql injection problem as well as performance issues.

Sam Hobbs · Answer

I am not as experienced with SQL as Senthilkumar is but I think you can use a parameterized query and if so then many experts recommend always doing that.

Camila Piai · Answer

Thank you, it worked!

Variable in WHERE Statement

Answers (4)