porblem of string

[jamesjoel]

What are the problems to construct SQL statement in the following way. (strID will be assigned user input value)

string strID;
:
:
string strSQL = “SELECT * From ItemMaster WHERE ID = ‘” + strID + “’”;

[ck9663]

What front-end are you using? This could be more of a question about your front-end than SQL Server.

Good Luck!!!

~~ CK