Incorrect syntax near SqlParameter

Question

I have this code

Dim q = New SqlCommand("SELECT * FROM [ddddd] WHERE ([Day] >= %XX ) AND ([Day] <= %YY )")
q.Parameters.Add(New SqlParameter("XX", rangeFrom.Value))
q.Parameters.Add(New SqlParameter("YY", rangeTo.Value))

q.Connection = dbc

Dim rd = q.ExecuteReader()
' ...

It throws a SqlException on the

Dim rd = q.ExecuteReader()

line with message

Incorrect syntax near 'XX'

Why?

what are the `%` signs for? – Ňɏssa Pøngjǣrdenlarp Mar 26 '16 at 19:09 — Ňɏssa Pøngjǣrdenlarp, Mar 26 '16 at 19:09

score 4 · Accepted Answer · answered Mar 26 '16 at 19:11

SQL Server parameters need to be prefixed with a @ (not a % as you've used it):

SELECT * 
FROM [ddddd] 
WHERE [Day] >= @XX AND [Day] <= @YY

and then also use the leading @ when declaring the parameters:

q.Parameters.Add(New SqlParameter("@XX", rangeFrom.Value))
q.Parameters.Add(New SqlParameter("@YY", rangeTo.Value))

Incorrect syntax near SqlParameter

1 Answers1