No Binding Variables in Dynamic SOQL

Hi,

I just noticed that bind variables are not allowed in Dynamic SOQL. I'd like to be able to pass in a set of Ids, i.e. getLeadIds() and then dynamically vary the subsequent part of the Where clause, i.e. City = 'Boston'.

Code:

Database.query('SELECT Name FROM Lead WHERE Id IN :getLeadIds() AND City = \'Boston\'');

Is there any good way to pass a set of Ids to a Dynamic SOQL statement?

Do I just have to resort to looping through the set of Ids and adding them to the query string in the required format, i.e. ('id1', 'id2')?

Seems a bit cumbersome, so just wondering if anyone had some better ideas on how to handle this.

Thanks a lot,
Mike

January 8, 2009
·
Answer
·
Like
0
·
Follow
0

JeremyKraybill
You can't bind, so you do have to build up a dynamic string. While bindings would be nice, it's not that cumbersome without it.

Code:
String idList = ''; for (Id id : ids) { idList = idList + ',\'' + id + '\''; } idList = idList.substring(1);

Jeremy Kraybill
Austin, TX

January 8, 2009
·
Like
0
·
Dislike
0

MG Consulting
Yeah, you're right, it's not so bad, thanks.

January 8, 2009
·
Like
0
·
Dislike
0

sslater
And if you really must use dynamic SOQL, be sure to keep the following in mind:

http://wiki.apexdevnet.com/index.php/Apex_and_Visualforce_Security_Tips#SOQL_Injection