【发布时间】:2019-12-07 18:43:02
【问题描述】:
我在下面有一个动态的sql查询来创建一个函数,我用4x单引号替换了单引号,但是它不起作用。
EXEC(
'
CREATE OR ALTER FUNCTION dbo.fnGetNumberFromPCN
(
@PCN VARCHAR(50)
)
RETURNS BIGINT
AS
BEGIN
--Init
DECLARE @Number BIGINT = NULL
--Get
SELECT @Number = CASE WHEN PATINDEX(''''%[^0-9]%'''',STUFF(V.YourString,1,PI.I-1,'''''''')) > 0
THEN CONVERT(BIGINT, SUBSTRING(V.YourString,PI.I,PATINDEX''''%[^0-9]%'''',STUFF(V.YourString,1,PI.I-1,''''''''))-1))
ELSE 0
END
FROM (VALUES(@PCN),(@PCN))V(YourString)
CROSS APPLY (VALUES(PATINDEX''''%[1-9]'''', V.YourString)))PI(I)
--Finally
RETURN @Number
END
')
GO
【问题讨论】:
标签: sql-server tsql escaping dynamic-sql single-quotes