Be careful when adding-comments in the middle of exec SQL

Sometimes in an SQL operation, a table is used as a variable, and the name of the table must be suffixed by time, so it cannot be directly executed.

So we have to pass in as a variable, as shown below:CodeFragment

 Set   @ Alarmtable   =   '  D_alarm_log  '   +   Substring ( Convert ( Varchar ( 20 ), Getdate (), 112 ), 1 , 6  )........  --  Add Object Name      If    Not   Exists ( Select   *   From Syscolumns Where ID =   Object_id (N ' [DBO]. [  '  +  @ Alarmtable  +  '  ]  ' ) And Name =  '  Object_name  '  )  Begin          Set   @ SQL  =   '  ALTER TABLE  '   +   @ Alarmtable   +   '  Add object_name varchar (128)  '          Print   @ SQL          Execute ( @ SQL  )  End 

In this exec @ SQL method, as long as there is a -- originally intended to comment the current row, but when the result is included in @ SQL, -- all subsequent statements are injected.

Be careful not to confirm @ SQL print ....