如何在SQL语句中加引号的问题

如何在SQL语句中加引号的问题

一个数据表，结构如下

ALTER PROCEDURE GETTEACHER
@a varchar (50),
@b int,
@c varchar(100) --通过DropDownList获取

AS
BEGIN
-- SET NOCOUNT ON added to prevent extra result sets from
-- interfering with SELECT statements.
SET NOCOUNT ON;

declare @weekday varchar (50); --星期几
declare @coursenum int; --第几节（eg.一二节为1，三四节为2）
declare @coursename varchar(100);--课程名称

set @weekday=@a
set @coursenum=@b
set @coursename= @c
/*
SELECT teacher.TeacherName, teacher.ID
FROM classCourse INNER JOIN
teacher ON classCourse.TeacherID = teacher.ID INNER JOIN
curriculumSchedule ON classCourse.ClassID = curriculumSchedule.ClassID AND
classCourse.ID =curriculumSchedule.Monday INNER JOIN
course ON classCourse.CourseID = course.ID
WHERE course.ID = @c and curriculumSchedule.CourseNum = @b
*/

declare @sql varchar(5000);--sql

--教授@c(课程名称)的教师ID是否 在@a(eg.星期)@b(eg.上午一二节)有课的教师的ID列表中

set @sql=
--@a(eg.星期)@b(eg.上午一二节)有课的教师的ID列表中
'SELECT teacher.TeacherName, teacher.ID'
+' FROM classCourse INNER JOIN'
+' teacher ON classCourse.TeacherID = teacher.ID INNER JOIN'
+' curriculumSchedule ON classCourse.ClassID = curriculumSchedule.ClassID AND'
+' classCourse.ID = curriculumSchedule.'+@a+' INNER JOIN'
+' course ON classCourse.CourseID = course.ID'
+' WHERE curriculumSchedule.CourseNum ='+ str(@b)
--课程courseid
+' AND course.ID =( SELECT course.ID FROM course '
+' WHERE (course.CourseName ='+@c+') ) '

--根据课程名称查询该课程的教师
+' AND classCourse.TeacherID = (SELECT DISTINCT classCourse.TeacherID '
+' FROM classCourse INNER JOIN '
+' course ON classCourse.CourseID = course.ID '
+' WHERE (course.CourseName ='+@c+') )'

EXEC (@sql);
END

实用存储过程的单步执行，发现字符串没有加引号

问题就在于，在传入参数的时候是没有引号的造成的

解决方法：

加两个单引号

--课程courseid
+' AND course.ID =( SELECT course.ID FROM course '
+' WHERE (course.CourseName ='''+@c+''') ) '

--根据课程名称查询该课程的教师
+' AND classCourse.TeacherID = (SELECT DISTINCT classCourse.TeacherID '
+' FROM classCourse INNER JOIN '
+' course ON classCourse.CourseID = course.ID '
+' WHERE (course.CourseName ='''+@c+''') )'