Very Computer

I am trying to turn a working SQL statement into an SP. The error
occurs when I try to use three parameters in a row, which are all
passed from a web page.

CREATE PROCEDURE [search_tool]

AS
tables.columns etc...

FROM table1 etc...

WHERE table1.column4 > '0'
AND TABLE.column1 = 'TO_THIS'

Any advice would be great.

Sam

casper,

dynamic query is your solution...informative stuff at erland's site..

http://www.algonet.se/~sommar/dynamic_sql.html

-oj

You can do this with dynamic SQL, but it is a bad idea.  The procedure is too general to be part of an application.  Think about it.  Why are you letting the user search on anything in the table?  And why is EVERY column in the table a CHAR(n) or VARCHAR(n)?  While that is possible, it is very unlikely unless your schema is an absolute nightmare that mimics a 1950's Cobol program.  

--CELKO--
 ===========================
 Please post DDL, so that people do not have to guess what the keys, constraints, Declarative Referential Integrity, datatypes, etc. in your schema are.

*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!

I agree with Joe that your approach is too generic and will get you into
problems.

If you insist on doing it in such a way, then I would suggest you put
together your queries in your frond-end programming language such as VB
or C++, and send simple SQL statements to SQL-Server. SQL-Server is not
very good at copying and pasting SQL statements on the fly. You will get
messy dynamic HTML.

Hope this helps.
Gert-Jan