Re: Dynamic SQL and Paramaterization

["Ryan Hunt" <ryan.hunt@xxxxxxxxxxxxx>]

Cancel that...I just found it.

there is a using statement where I can manually line up markers with named
variables.

Thanks

Ryan

"Ryan Hunt" <ryan.hunt@xxxxxxxxxxxxx> wrote in
message news:etrdel$lil$1@xxxxxxxxxxxxxxxx
> Microsoft guy here...bear with me.
>
> I am writing a DB2 proc that will utlize dynamic SQL to build the SQL
String
> based on parameters recieved at call time.  So far I've found 2 ways to
> include a portion of my params within the query:
>
> 1)  SET SQL_STMT='SELECT * FROM books WHERE bookid=?'
> or
> 2)  SET SQL_STMT='SELECT * FROM books WHERE bookid=' || CAST(parm1 as
> varchar(x))
>
> My issues are that with option 1 the lining up of paramter markers (?)
seem
> to be based on the order they are defined in the procedure.  (i.e. the
first
> ? get the first defined parameter, the second get the second and so on).
> This will not work for me in this particular proc.
>
> My other issue is simply an academic one.  On the DBMS I am accustomed to,
> not actually paramterizing your queries is a last resort type of thing.
So,
> I have been trying to avoid it on the AS400 as well (maybe without reason
> though...).
>
> Anyway, is there a way to pass named variables/parameters to my D-SQL?
>
> Thanks in advance.
>
> Ryan
>
>
>
> -- 
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email:
MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.