ASP.NET Sql Server In Stored Procedure

Question

0.00/5 (No votes)

See more:

SQL

Alter procedure VisitorDetails1
@name nvarchar(50),
@City nvarchar(100),
@Dept nvarchar(max),
@TableName nvarchar(50)
as

IF (EXISTS (SELECT * FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_NAME=@TableName)) 
--IF db_id('@TabName') IS NOT NULL
--IF OBJECT_ID('@TabName','U') is not null
begin

Declare @set nvarchar(50)
set @set='insert into '+@TableName+'(Name,City,Dept) values(@name,@City,@Dept)'

--set @set='insert into '+@TableName+' values(@name,@City,@Dept)'

exec(@set)
Print 'Success'
end
else
begin
print 'Table is Not there'
end

My Result IS After Exectuing:

Msg 137, Level 15, State 2, Line 1
Must declare the scalar variable "@name".
Success..

Please Help Me What I need to Do..
Advance Thanks.

Posted 7-Jan-13 1:30am

Perumalkutti

Updated 7-Jan-13 1:32am

Aarti Meswania

v2

Add a Solution

5 solutions

Solution 1

This will not work
Exec statement execute in different context where the variables are not available.

instead concatenate the values to the string and exectuee

for exgs

Declare @str nVarchar(50)

set @str ='Insert into Tb1 values(' + @r + ')'
exec(@str)

Posted 7-Jan-13 1:36am

Pramod kumar R Nair

Comments

Perumalkutti 7-Jan-13 8:10am

I Tried This also... But Did't Work Sir...

Solution 4

Change this

SQL

set @set='insert into '+@TableName+'(Name,City,Dept) values(@name,@City,@Dept)'

to

SQL

set @set='insert into '+@TableName+'(Name,City,Dept) values('+@name+','+@City+','+@Dept+')'

Change the above sql statement as per your requirement. You will need to wrap your string in apostrophes.

Posted 7-Jan-13 1:40am

Zafar Sultan

Comments

Perumalkutti 7-Jan-13 8:09am

I Tried This Also sir.. But didt work

Zafar Sultan 7-Jan-13 8:16am

You are jumping from one thread to another. Stick to one. The complete solution to your problem is posted here: http://www.codeproject.com/Questions/523255/ASP-NETplusStoredplusPRocedures Now do not keep updating both the threads. Use one only. Please.

Solution 2

Hi,
change your variable name
@name to @p_name

~~do this to all......~~
~~it will definitely work..~~

Posted 7-Jan-13 1:37am

ranjeet.waje

Updated 7-Jan-13 1:59am

v2

Comments

Perumalkutti 7-Jan-13 8:09am

the same problem sir..

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Aarti Meswania · Accepted Answer · 2013-01-07T01:39:00

Solution 3

SQL

Alter procedure VisitorDetails1
@name nvarchar(50),
@City nvarchar(100),
@Dept nvarchar(max),
@TableName nvarchar(50)
as
 
IF (EXISTS (SELECT * FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_NAME=@TableName)) 
--IF db_id('@TabName') IS NOT NULL
--IF OBJECT_ID('@TabName','U') is not null
begin
 
Declare @set nvarchar(50)
set @set='insert into '+@TableName+'(Name,City,Dept) values(''' + @name + ''',''' + @City + ''',''' + @Dept + ''')'
 
exec(@set)
Print 'Success'
end
else
begin
print 'Table is Not there'
end

Happy Coding!
:)

Posted 7-Jan-13 1:39am

Aarti Meswania

Updated 7-Jan-13 2:08am

v3

Comments

Zafar Sultan 7-Jan-13 7:43am

+5

Aarti Meswania 7-Jan-13 7:44am

thank you! :)

__TR__ 7-Jan-13 8:16am

5ed!

Aarti Meswania 7-Jan-13 8:17am

Thank you!
:)

URVISH_SUTHAR1 7-Jan-13 11:08am

Easy to pass "SQL Injection" on this prod. So think about it :)

Santhosh Kumar Jayaraman · Accepted Answer · 2013-01-07T03:58:00

You have to make changes at 2 places. Highlighted in bright colors

one is change the size of @set variable.

When you declare @set=50, it can hold only 50 characters and if you try to insert it will fail

Alter procedure VisitorDetails1
@name nvarchar(50),
@City nvarchar(100),
@Dept nvarchar(max),
@TableName nvarchar(50)
as

IF (EXISTS (SELECT * FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_NAME=@TableName))
--IF db_id('@TabName') IS NOT NULL
--IF OBJECT_ID('@TabName','U') is not null
begin

Declare @set nvarchar(500)
set @set='insert into '+@TableName+'(Name,City,Dept) values(''' + @name + ''',''' + @City + ''',''' + @Dept + ''')'
print @set
exec(@set)
Print 'Success'
end
else
begin
print 'Table is Not there'
end

You have to make changes at 2 places