sql 分页存储过程
/*
过程说明:对表按任意字段进行排序分页
创建时间:2005年7月24日
作者： chen gang
*/
CREATE PROCEDURE dbo.GetPagingRecord
(
@tablename varchar(100),--表名或视图表
@fieldlist varchar(4000)='*',--欲选择字段列表
@orderfield varchar(100),--排序字段
@keyfield varchar(100),--主键
@pageindex int,--页号,从1开始
@pagesize int=20,--页尺寸
@strwhere varchar(4000),--条件
@ordertype varchar(1)='1'--排序,1,降序,0,升序
)
AS
SET NOCOUNT ON
declare @sqlstr varchar(6000)
declare @orderstr varchar(100)
if(@keyfield=@orderfield)
begin
set @orderstr = ''
end
else
begin
set @orderstr = ','+@keyfield+' asc'
end
if @pageindex<=0
set @pageindex=1
--处理SQL中危险字符,并且将条件处理成易嵌入的形式
set @strwhere=replace(@strwhere,'''','''''')
set @strwhere=replace(@strwhere,'--','')
set @strwhere=replace(@strwhere,';','')
set @sqlstr='declare @CurPageNum int;'
set @sqlstr=@sqlstr+'declare @nextpagenum int;'
set @sqlstr=@sqlstr+'set @curpagenum='+cast(@PageIndex-1 as varchar)+'*'+cast(@Pagesize as varchar)+';'
set @sqlstr=@sqlstr+'set @nextpagenum='+cast(@PageIndex as varchar)+'*'+cast(@Pagesize as varchar)+';'
set @sqlstr=@sqlstr+'declare @sqlstr varchar(6000);'
if @ordertype='1'
begin
set @sqlstr=@sqlstr+'set @sqlstr=''select [email=]'+@fieldlist+'[/email] from ( select top ''+cast(@nextpagenum as varchar)+'' * from
[email=]'+@tablename+'[/email] where 1=1 [email=]'+@strwhere+'[/email] order by [email=]'+@orderfield+'[/email] desc' + @orderstr+') as a where 1=1 and [email=]'+@keyfield+'[/email] not in (
select top ''+cast(@curpagenum as varchar)+'' [email=]'+@keyfield+'[/email] from [email=]'+@tablename+'[/email] where 1=1 [email=]'+@strwhere+'[/email]
order by [email=]'+@orderfield[/email] +' desc'+ @orderstr +') order by ' + @orderfield +' desc'';'
end
else
begin
set @sqlstr=@sqlstr+'set @sqlstr=''select [email=]'+@fieldlist+'[/email] from ( select top ''+cast(@nextpagenum as varchar)+'' * from
[email=]'+@tablename+'[/email] where 1=1 [email=]'+@strwhere+'[/email] order by [email=]'+@orderfield+'[/email] asc' + @orderstr+' ) as a where 1=1 and [email=]'+@keyfield+'[/email] not in (
select top ''+cast(@curpagenum as varchar)+'' [email=]'+@keyfield+'[/email] from [email=]'+@tablename+'[/email] where 1=1 [email=]'+@strwhere+'[/email]
order by [email=]'+@orderfield[/email] +' asc' + @orderstr+') order by [email=]'+@orderfield[/email] +' asc'';'
end
set @sqlstr=@sqlstr+'execute( @sqlstr)'
print @sqlstr
execute(@sqlstr)
GO
