0

I have created a stored procedure which deletes a list of usernames from the database. However the output of this script is weird. It treats the input which is the username input as a column. Why is it doing so ?

CREATE PROCEDURE [dbo].[sp_deleteUsersFromDb]( @username varchar(500)) AS
BEGIN
   DECLARE @SQL varchar(600)

   EXEC('UPDATE [dbo].USER SET DELETED = 1 WHERE USERNAME IN (' + @username + ')')

   PRINT N'DELETED THE USERS FROM THE DB'
END

When I run this I get

Msg 207, Level 16, State 1, Line 1
Invalid column name 'user1'.
DELETED THE USERS FROM THE DATABASE

Table schema is :

CREATE TABLE [dbo].[USER](
[ID] [int] IDENTITY(1,1) NOT NULL,
[VERSION] [int] NOT NULL,
[USERNAME] [varchar](32) NOT NULL,
[DELETED] [bit] NULL,

    CONSTRAINT [USER_PK] 
   PRIMARY KEY CLUSTERED ([ID] ASC)
) ON [PRIMARY]
4

1 回答 1

2

@username 参数必须包含引用的用户名，例如“'user1', 'user2'”

于 2013-05-21T01:48:07.330 回答