CREATE TABLE problem!! help :S

[magnetica]

ok so i can create a command where it inserts a table in to my connection string using the following sql command:

"CREATE TABLE myTable" KEY,"

but what i want to do is not have a static table but so it changes and sets the table name to whatever is in the SQL parameter or variable.. here are a few ways i have tried:

"CREATE TABLE @sqlParameter"
"CREATE TABLE (@sqlParameter)"
"CREATE TABLE " + @sqlParameter
"CREATE TABLE " & @sqlParameter

now do i have to do this in a stored procedure or what? can some one please point me in the right direction

[Phil Weber]

Assuming you're using SQL Server, you may use the EXEC statement to execute SQL code in a string. See http://www.sqlteam.com/item.asp?ItemID=4619 for more information.

If the parameter value is coming from the UI, you should not use dynamic SQL; it makes you vulnerable to SQL injection attacks.

[magnetica]

thank you! your help is very much apreicated.. i am very new to Sql server

cheers