Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

ALTER TABLE my_table ADD @column INT

If i want to use a variable as name of the new column, is this posible in MS SQL?

Example that dont work:

ALTER TABLE my_table ADD @column INT

This worked great for me:

EXEC ('ALTER TABLE my_table ADD ' + @column + ' INT')
like image 684
Andreas Avatar asked Apr 10 '10 16:04

Andreas


1 Answers

This is possible using dynamic sql to build your DDL and using the EXEC command to execute the string.

Declare @SQL VarChar(1000)

SELECT @SQL = 'ALTER TABLE my_table ADD ' + @column + ' INT'

Exec (@SQL)

See this article.

I will also add that the moment you venture to the land of dynamic sql, you need to take care to not expose yourself to SQL Injection attacks. Always clean up the parameters coming in.

As Philip mentions - think long and hard before doing this. The fact that it is possible does not make it a good thing...

Erland Sommarskog wrote an extensive article about using dynamic sql - The curse and blessings of dynamic SQL which I recommend reading fully.

like image 159
Oded Avatar answered Oct 22 '22 13:10

Oded