一个带参数拼接Sql语句的问题

[uuuuu]

关键的条件－－＞DECLARE @OrderID INT

SET @SQL1='SELECT @OrderID=OrderID FROM '+@TableName1+' WHERE OrderingID='+Convert(varchar,@OrderingID)
EXEC(@SQL1)

我这样用，总是报@OrderID这边有问题，我试过用conver（varchar,@OrderID)　还是不行，请指教

[Comer]

SET @SQL1='SELECT ' + str(@OrderID) + ' = OrderID FROM '+@TableName1+' WHERE OrderingID='+Convert(varchar,@OrderingID)

[zjcxc]

DECLARE @OrderID INT
declare @SQL1 nvarchar(4000) --注意类型

SET @SQL1='SELECT @OrderID=OrderID FROM '+@TableName1+' WHERE OrderingID='+Convert(varchar,@OrderingID)
EXEC sp_executesql @SQL1,N'@OrderID INT out',@OrderID out

[rfq]

DECLARE @OrderID INT
declare @SQL1 varchar(1000)
declare @TableName1 varchar(100)
set @SQL1=''
set @TableName1='TabName'
SET @SQL1='SELECT @OrderID=OrderID FROM '+@TableName1+' WHERE OrderingID=Convert(varchar,@OrderingID)'

[Well]

SET @SQL1='SELECT @OrderID=OrderID FROM '+@TableName1+' WHERE OrderingID='+Convert(varchar,@OrderingID)
EXEC(@SQL1)

現在以上這種錯誤用output變量最沒有問題

[Well]

create procedure p_get
@OrderID INT output,
@TableName1 varchar(50),
@OrderingID int
as
SET @SQL1='SELECT @OrderID=OrderID FROM '+@TableName1+' WHERE OrderingID='+Convert(varchar,@OrderingID)
EXEC(@SQL1)

go
declare @orderid
exec p_get @orderid,'Tablename',2
select @orderid

[talantlee]

exec('SELECT '+@OrderID+'=OrderID FROM '+@TableName1+' WHERE OrderingID='+Convert(varchar,@OrderingID))

[631799]

DECLARE @OrderID INT
declare @SQL1 nvarchar(4000)
SET @SQL1='SELECT @OrderID=OrderID FROM '+@TableName1+' WHERE OrderingID='+Convert(varchar,@OrderingID)
EXEC sp_executesql @SQL1,N'@OrderID INT out',@OrderID out
select @OrderID