动态 SQL 结果到 SQL 存储过程中的临时表中

2021-12-10 00:00:00 tsql sql-server dynamic-sql

代码如下:

ALTER PROCEDURE dbo.pdpd_DynamicCall 
@SQLString varchar(4096) = null

AS

Begin

    create TABLE #T1 ( column_1 varchar(10) , column_2 varchar(100) )

    insert into #T1 
        execute ('execute ' + @SQLString )

    select * from #T1 

End

问题是我想调用可以返回不同列的不同过程.因此，我必须一般地定义表 #T1.但我不知道如何.

The problem is that I want to call different procedures that can give back different columns. Therefore I would have to define the table #T1 generically. But I don't know how.

有人能帮我解决这个问题吗?

Can anyone help me on this problem?

推荐答案

尝试:

SELECT into #T1 execute ('execute ' + @SQLString )

这闻起来真的很糟糕，就像一个 sql 注入漏洞.

And this smells real bad like an sql injection vulnerability.

更正(根据@CarpeDiem 的评论):

correction (per @CarpeDiem's comment):

INSERT into #T1 execute ('execute ' + @SQLString )

此外，如果 sql 字符串不是过程，则省略 'execute'

also, omit the 'execute' if the sql string is something other than a procedure

相关文章