Quick thought, no need for a dynamic sql statement here.
😎
The query you are constructing looks like this
SELECT
N_image_number
,N_image_name
,N_image_desc
,N_available
,N_i_size
,N_image_th
,N_image
FROM tblart
WHERE N_image_desc LIKE '%strSearch%'
OR N_image_name LIKE '%strSearch%'
OR N_image_number LIKE 'strSearch'
ORDER BY N_image_order ASC;
Adding a @strSearch parameter it looks like this
DECLARE @strSearch VARCHAR(100) = '';
SELECT
N_image_number
,N_image_name
,N_image_desc
,N_available
,N_i_size
,N_image_th
,N_image
FROM tblart
WHERE N_image_desc LIKE '%' + @strSearch + '%'
OR N_image_name LIKE '%' + @strSearch + '%'
OR N_image_number LIKE @strSearch
ORDER BY N_image_order ASC;