用if存儲過程動態查詢

Question

我有一個存儲過程，在這個存儲過程中，我必須使用=,<,>作爲參數來比較這些值，並將它與具有值1,2,3的另一個參數值等級進行比較， 4,5，但不知道該怎麼做，請幫助。

這裏是我的存儲過程是我迄今爲止嘗試過了，我有三個表user，RatingReview和accounttype：

Create Procedure searchsp_LenderSearch 
    @pAccountTypeId int =null, 
    @pFirstName varchar(25)=null, 
    @pLastName varchar(35)=null, 
    @pZip varchar(10)=null, 
    @pOperator varchar(2)=null, 
    @pRating varchar(2)=null 
AS 
BEGIN 

    SET NOCOUNT ON; 
Declare @SQLQuery AS NVarchar(4000) 
    SET @SQLQuery= 
    'select 
    at.AccountName, 
    U.UserId, 
    U.FirstName, 
    U.LastName, 
    U.NMLS, 
    U.[Address], 
    U.PrimaryEmailId As Office, 
    U.AdditionalEmail As Personal, 
    U.DirectPhone As Work, 
    U.Mobile, 
    R.RatingStar 

    from [User] U 
    left outer join RatingReview R on R.UserId =U.UserId 
    left outer join AccountType at on at.AccountTypeId = U.AccountTypeId 
    where U.Deleted =0 
    AND at.AccountTypeId = '+CAST(@pAccountTypeId as Varchar(10))+' 
    AND U.FirstName = ''' + @pFirstName + ''' 
    AND U.LastName = ''' + @pLastName + ''' 
    AND U.Zip = ''' + @pZip + ''' 
    AND R.RatingStar = ''' + @pRating + '''' 


IF(@pAccountTypeId !=null OR @pAccountTypeId != '') 

    BEGIN 
     SET @SQLQuery=@SQLQuery+' AND at.AccountTypeId='+CONVERT(VARCHAR, @pAccountTypeId) 
    END 

    IF(@pFirstName !=null OR @pFirstName != '') 
    BEGIN 
     SET @SQLQuery=@SQLQuery+' AND U.FirstName Like ''%' + @pFirstName + '%''' 
    END 

    IF(@pLastName !=null OR @pLastName != '') 
    BEGIN 
     SET @SQLQuery=@SQLQuery+' AND U.LastName Like ''%' + @pLastName + '%''' 
    END 

    IF(@pZip !=null OR @pZip != '') 
    BEGIN 
     SET @SQLQuery=@SQLQuery+' AND U.Zip Like ''%' + @pZip + '%''' 
    END 

    IF(@pRating !=null OR @pRating != '') 
    BEGIN 
     SET @SQLQuery=@SQLQuery+' AND R.RatingStar Like ''%' + @pRating + '%''' 
    END 

    IF(@pOperator = '=') 
    BEGIN 
    SET @SQLQuery += ' AND R.RatingStar = ' + CAST(@pRating AS NVARCHAR(5)) + '' 
    END 

    IF(@pOperator = '>') 
     BEGIN 
     SET @SQLQuery += ' AND R.RatingStar > ' + CAST(@pRating AS NVARCHAR(5)) + '' 
     END 

    IF(@pOperator = '<') 
     BEGIN 
     SET @SQLQuery += ' AND R.RatingStar < ' + CAST(@pRating AS NVARCHAR(5)) + '' 
     END 
     SET @SQLQuery=@SQLQuery+ 
    'group by 
    at.AccountName, 
    U.UserId, 
    U.FirstName, 
    U.LastName, 
    U.NMLS, 
    U.[Address], 
    U.PrimaryEmailId, 
    U.AdditionalEmail, 
    U.DirectPhone, 
    U.Mobile, 
    R.RatingStar' 

    EXEC (@SQLQuery) 
END 

Answer 1

你需要逃避你傳遞給查詢的參數將它們串聯在@sqlstring變量。試試這個查詢：如果像exec searchsp_LenderSearch 1, 'John', 'Adams', '100AA', '>',1

執行，我認爲這是你想要的

SELECT 
    at.AccountTypeId, 
    U.UserId, 
    U.FirstName, 
    U.LastName, 
    R.RatingStar AS Rating, 
    U.NMLS, 
    U.[Address], 
    U.PrimaryEmailId As Office, 
    U.AdditionalEmail As Personal, 
    U.DirectPhone As Work, 
    U.Mobile 
FROM [User] U 
LEFT OUTER JOIN RatingReview R ON R.UserId = U.UserId 
LEFT OUTER JOIN AccountType at ON at.AccountTypeId = U.AccountTypeId 
WHERE U.Deleted = 0 
    AND at.AccountTypeId = 1 
    AND U.FirstName = 'John' 
    AND U.LastName = 'Adams' 
    AND U.Zip = '100AA' AND r.ratingstar > 1 
GROUP BY 
    at.AccountTypeId, 
    U.UserId, 
    U.FirstName, 
    U.LastName, 
    U.NMLS, 
    U.[Address], 
    U.PrimaryEmailId, 
    U.AdditionalEmail, 
    U.DirectPhone, 
    U.Mobile, 
    R.RatingStar 

：

Create PROCEDURE searchsp_LenderSearch 
    @pAccountType int, 
    @pFirstName varchar(25), 
    @pLastName varchar(35), 
    @pZip varchar(10), 
    @pOperator varchar(2), 
    @pRating int 
AS 
BEGIN 
    SET NOCOUNT ON; 
    DECLARE @SQLQuery AS NVarchar(4000) 
    SET @SQLQuery = ' 
SELECT 
    at.AccountTypeId, 
    U.UserId, 
    U.FirstName, 
    U.LastName, 
    R.RatingStar AS Rating, 
    U.NMLS, 
    U.[Address], 
    U.PrimaryEmailId As Office, 
    U.AdditionalEmail As Personal, 
    U.DirectPhone As Work, 
    U.Mobile 
FROM [User] U 
LEFT OUTER JOIN RatingReview R ON R.UserId = U.UserId 
LEFT OUTER JOIN AccountType at ON at.AccountTypeId = U.AccountTypeId 
WHERE U.Deleted = 0 
    AND at.AccountTypeId = 1 
    AND U.FirstName = ''' + @pFirstName + ''' 
    AND U.LastName = ''' + @pLastName + ''' 
    AND U.Zip = ''' + @pZip + '''' 

IF(@pOperator = '=') 
    BEGIN 
    SET @SQLQuery += ' AND r.ratingstar = ' + CAST(@pRating AS NVARCHAR(5)) + '' 
    END 
IF(@pOperator = '<') 
    BEGIN 
    SET @SQLQuery += ' AND r.ratingstar < ' + CAST(@pRating AS NVARCHAR(5)) + '' 
    END 
IF(@pOperator = '>') 
    BEGIN 
    SET @SQLQuery += ' AND r.ratingstar > ' + CAST(@pRating AS NVARCHAR(5)) + '' 
    END 

SET @SQLQuery += ' 
GROUP BY 
    at.AccountTypeId, 
    U.UserId, 
    U.FirstName, 
    U.LastName, 
    U.NMLS, 
    U.[Address], 
    U.PrimaryEmailId, 
    U.AdditionalEmail, 
    U.DirectPhone, 
    U.Mobile, 
    R.RatingStar' 
EXEC (@SQLQuery) 
END 

上面的代碼會產生類似的查詢。顯然，你可能要添加一些錯誤檢查和參數等驗證

如這裏要求是查詢的更新版本改變以匹配更新的問題：

Create Procedure searchsp_LenderSearch 
    @pAccountTypeId int  = null, 
    @pFirstName varchar(25) = null, 
    @pLastName  varchar(35) = null, 
    @pZip   varchar(10) = null, 
    @pOperator  varchar(2) = null, 
    @pRating  varchar(2) = null 
AS 
BEGIN 
    SET NOCOUNT ON; 
    DECLARE @SQLQuery AS NVarchar(4000) 
    SET @SQLQuery =' 
SELECT 
    at.AccountName, 
    U.UserId, 
    U.FirstName, 
    U.LastName, 
    U.NMLS, 
    U.[Address], 
    U.PrimaryEmailId As Office, 
    U.AdditionalEmail As Personal, 
    U.DirectPhone As Work, 
    U.Mobile, 
    R.RatingStar 
FROM [User] U 
LEFT OUTER JOIN RatingReview R ON R.UserId = U.UserId 
LEFT OUTER JOIN AccountType at ON at.AccountTypeId = U.AccountTypeId 
WHERE U.Deleted = 0 
' 
IF(@pAccountTypeId !=null OR @pAccountTypeId != '') 
    BEGIN 
     SET @SQLQuery += ' AND at.AccountTypeId = '+CONVERT(VARCHAR(10), @pAccountTypeId) + '' 
    END 

IF(@pFirstName !=null OR @pFirstName != '') 
    BEGIN 
     SET @SQLQuery += ' AND U.FirstName Like ''%' + @pFirstName + '%''' 
    END 

IF(@pLastName !=null OR @pLastName != '') 
    BEGIN 
     SET @SQLQuery += ' AND U.LastName Like ''%' + @pLastName + '%''' 
    END 

IF(@pZip !=null OR @pZip != '') 
    BEGIN 
     SET @SQLQuery += ' AND U.Zip Like ''%' + @pZip + '%''' 
    END 

IF(@pOperator = '=') 
    BEGIN 
     SET @SQLQuery += ' AND R.RatingStar = ' + CAST(@pRating AS NVARCHAR(5)) + '' 
    END 

IF(@pOperator = '>') 
    BEGIN 
     SET @SQLQuery += ' AND R.RatingStar > ' + CAST(@pRating AS NVARCHAR(5)) + '' 
    END 

IF(@pOperator = '<') 
    BEGIN 
     SET @SQLQuery += ' AND R.RatingStar < ' + CAST(@pRating AS NVARCHAR(5)) + '' 
    END 

SET @SQLQuery += ' 
GROUP BY 
    at.AccountName, 
    U.UserId, 
    U.FirstName, 
    U.LastName, 
    U.NMLS, 
    U.[Address], 
    U.PrimaryEmailId, 
    U.AdditionalEmail, 
    U.DirectPhone, 
    U.Mobile, 
    R.RatingStar' 

    EXEC (@SQLQuery) 
    --PRINT (@SQLQuery) 
END