"Angi" <angi@microsoft.com> wrote in message
news:uLfHusmbEHA.1000@TK2MSFTNGP12.phx.gbl...
> Hi,
>
> I use this syntax to enter multi value in a parameter textbox.
>
> ="SELECT OrderID FROM Orders" & IIF(Parameters!ID.Value="","","WHERE
OrderID
> IN (" + Parameters!ID.Value + ")")
>
> When value is empty "", I can get all of the OrderID.
> But when I enter OrderID like 001 (the datatype of the OrderID is Int),
> it popup syntax error: Keyword 'IN' Syntax incorrect
> What's wrong with my syntax? or the way to get all data and parameter data
> is incorrect?
> Thanks for your time.
>
> Angi
>
>

> Did you try this expression (adding a blank between "Orders" and "WHERE"):
> ="SELECT OrderID FROM Orders " & IIF(Parameters!ID.Value="","","WHERE
> OrderID IN (" + Parameters!ID.Value + ")")
>
> Note: I'm sure you are aware that dynamically constructing a query
> commandtext using user input (i.e. user-specified report parameters) opens
> the door to all types of SQL injection attacks.
>
> --
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> "Angi" <angi@microsoft.com> wrote in message
> news:uLfHusmbEHA.1000@TK2MSFTNGP12.phx.gbl...
> > Hi,
> >
> > I use this syntax to enter multi value in a parameter textbox.
> >
> > ="SELECT OrderID FROM Orders" & IIF(Parameters!ID.Value="","","WHERE
> OrderID
> > IN (" + Parameters!ID.Value + ")")
> >
> > When value is empty "", I can get all of the OrderID.
> > But when I enter OrderID like 001 (the datatype of the OrderID is Int),
> > it popup syntax error: Keyword 'IN' Syntax incorrect
> > What's wrong with my syntax? or the way to get all data and parameter
data
> > is incorrect?
> > Thanks for your time.
> >
> > Angi
> >
> >
>
>