再问一个菜问题(关于SQL语句)

[尚方宝剑彤叟无欺]

请问各位高手，在delphi中以下sql语句对吗？不对，应如何写？谢谢!

var
sName:string;
sSQL:string;

......
sName:='WangJun';
sSql:='select * from users where name=''+sName+''';
.....

[yzf111]

sSql:='select * from users where name=:sName'

[yzf111]

上面错了
sSql:='select * from users where name='''+sName+'''';

[dulei115]

sSql:='select * from users where name='''+sName+'''';

[swei56]

sSql:='select * from users where name='''+sName+'''';

[PrgmLover]

sSql:='select * from users where name='''+sName+'''';

[feiqinfeiwhw]

错的了，下面才对
sSql:='select * from users where name='''+sName+'''';

[hiflower]

sSql:='select * from users where name='+QuotedStr(sName);
sSql:='select * from users where name='''+sName+'''';

[hzq99]

sSql:='select * from users where name='+''''+sName+'''';

[dulei115]

在Delphi中，当字符串中含有“'”（单引号）时，为了区别于字符串的边界字符，用“''”表示一个“'”（即两个单引号才表示一个单引号）。

[2312]

sSql:='select * from users where name='+#39+sName+#39;

[尚方宝剑彤叟无欺]

大家回复真快，谢谢楼上各位，在下这里有礼了

[cow8063]

select * from users where name='''+sName+''''

[Northwindrocker]

'select * from users where name='+''''+sName+''''
给你一个完整的，肯定能用。你照这个写用不了你找我!

[jerehsofter]

sName:='WangJun';
sSql:=format('select * from users where name=''%s'' ',[sName+]));

[jerehsofter]

sName:='WangJun';
sSql:=format('select * from users where name=''%s'' ',[sName]));

[ekin]

sName:='WangJun';
sSql:=format('select * from users where name=''%s'' ',[sName]));
最好

[尚方宝剑彤叟无欺]

谢谢各位

[uoche]

sSql:='select * from users where name='''+sName+'''';