SQL Server中变量的分页排序

Question

此SQL语句在ORDER BY'+ @SortField +''+ @SortOrder +'部分中被标记在SQL Server中。任何想法如何解决？

ALTER PROC [sbuser].[sp_MemberMailList ] 
@MemberMailID bigint = null, 
@FromMemberID bigint = null, 
@ToMemberID bigint = null, 
@Subject varchar(150) = null, 
@Message varchar(8000) = null, 
@FromDeletedFlag bit = null, 
@ToDeletedFlag bit = null, 
@FromArchivedFlag bit = null, 
@ToArchivedFlag bit = null, 
@ReadFlag bit = null, 
@SQL nvarchar(4000) = null, 
@SortField varchar(100) = null, 
@SortOrder varchar(25) = null, 
@NotificationSent bit = null, 
@MemberID bigint = null, 
@OnHold bit = 0, 
@SpecialMail varchar(1) = 'N', 
@PageSize float = null, 
@PageNum int = 1, 
@TotalPages float = null, 
@StartDate datetime = null, 
@EndDate datetime = null, 
@MODE varchar(50) 

AS 

IF @MODE = 'INBOX-MAIL' 
BEGIN 
    SELECT @TotalPages = COUNT(*)/@PageSize 
    FROM MemberMail a 
    INNER JOIN Member b ON b.MemberID = a.FromMemberID 
    WHERE a.ToMemberID = @ToMemberID 
    AND a.ToDeletedFlag = 0 
    AND a.OnHold = 0 
    AND a.ToArchivedFlag = 0; 

    WITH InMails AS 
    (
     SELECT ROW_NUMBER() OVER(ORDER BY ' + @SortField + ' ' + @SortOrder + ') AS RowNum, 
     a.MemberMailID, 
     a.FromMemberID, 
     a.Subject, 
     a.CreateDate, 
     b.UserName, 
     a.ToReadFlag, 
     b.Firstname, 
     b.Lastname, 
     b.MemberDisplayName AS DisplayName 
     FROM MemberMail a 
     INNER JOIN Member b ON b.MemberID = a.FromMemberID 
     WHERE a.ToMemberID = @ToMemberID 
     AND a.ToDeletedFlag = 0 
     AND a.OnHold = 0 
     AND a.ToArchivedFlag = 0 
    ) 
    SELECT * 
    FROM InMails 
    WHERE RowNum BETWEEN (@PageNum - 1) * @PageSize + 1 AND @PageNum * @PageSize 
    ORDER BY CreateDate DESC 
END 

任何帮助，将不胜感激..

非常感谢

Answer 1

您无法指定字段或使用变量排序方向。整个SQL语句需要是一个动态字符串来执行此操作。

所以

SELECT ROW_NUMBER() OVER(
    ORDER BY [field expression] asc|desc) AS RowNum 

是好的，因为是

exec('SELECT ROW_NUMBER() OVER(' + 
    'ORDER BY ' + @SortField + ' ' + @SortOrder + ') AS RowNum ...') 

但

SELECT ROW_NUMBER() OVER(
    ORDER BY ' + @SortField + ' ' + @SortOrder + ') AS RowNum 

不能在SQL查询编译器进行处理。

Answer 2

SELECT ROW_NUMBER() OVER(ORDER BY ' + @SortField + ' ' + @SortOrder + ') AS RowNum, 
            ^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^ 
            string #1    string #2 

                 ^---no operator 

除非你有一个外部串您的代码示例中没有显示，则无法建立order by子句喜欢这个。你有两个不同的引用字符串，之间有空格。

Answer 3

它看起来像你试图动态改变ORDER BYROW_NUMBER()排名函数的字段。你不能像你想要的那样去做。

您需要使用动态SQL来完成您正在尝试的操作。您应该阅读The Curse and Blessings of Dynamic SQL以更好地理解机制，以及如何保护自己免受SQL注入的侵害。

如果由于某种原因您不想使用动态SQL，您可以生成一个巨大的case语句。例如下面的这个例子取自gbn对Dynamic order direction的回答。

SELECT 
    Columns you actually want 
FROM 
    (
    SELECT 
     Columns you actually want, 
     ROW_NUMBER() OVER (ORDER BY AddedDate) AS AddedDateSort, 
     ROW_NUMBER() OVER (ORDER BY Visible) AS VisibleSort, 
     ROW_NUMBER() OVER (ORDER BY AddedBy) AS AddedBySort, 
     ROW_NUMBER() OVER (ORDER BY Title) AS TitleSort 
    FROM 
     myTable 
    WHERE 
     MyFilters... 
    ) foo 
ORDER BY 
    CASE @OrderByColumn 
     WHEN 'AddedDate' THEN AddedDateSort 
     WHEN 'Visible' THEN VisibleSort  
     WHEN 'AddedBy' THEN AddedBySort 
     WHEN 'Title' THEN TitleSort 
    END * @multiplier; 

如果你这样做，你应该注意性能问题，因为索引可能不会用于排序。