In the SQL stored procedure to add a single quotation mark to the condition variable, without the statement will be a problem, the following is in the stored procedure to set the condition where the dynamic change, to where the completion of the value and the previous statement stitching, and then execute (SQL)
Set @where= '(DATEDIFF (Day," "+CONVERT(varchar( -),@d_start, at)+" ", Sdate) >=0 and DATEDIFF (Day," "+CONVERT(varchar( -),@d_end, at)+" ", Sdate) <=0) and' +'shopid=" "+@shopid+" "and Venderid in' +'(select Vender from TableB where vendertype="'type"'and shopid=" "+@shopid+" ")' --how to ask Hovertree.com
@d_start @d_end,
@shopid
These three are called stored procedures passed in parameters, to be these with the varchar type of concatenation together with 3 single quotation mark + variable per side, Eg:where shopid= "[Email protected]+" "to write.
Recommendation: http://www.cnblogs.com/roucheng/p/3541165.html
Adding single quotes to conditional variables in SQL stored procedures