• Quick thought, no need for a dynamic sql statement here.

    😎

    The query you are constructing looks like this

    SELECT

    N_image_number

    ,N_image_name

    ,N_image_desc

    ,N_available

    ,N_i_size

    ,N_image_th

    ,N_image

    FROM tblart

    WHERE N_image_desc LIKE '%strSearch%'

    OR N_image_name LIKE '%strSearch%'

    OR N_image_number LIKE 'strSearch'

    ORDER BY N_image_order ASC;

    Adding a @strSearch parameter it looks like this

    DECLARE @strSearch VARCHAR(100) = '';

    SELECT

    N_image_number

    ,N_image_name

    ,N_image_desc

    ,N_available

    ,N_i_size

    ,N_image_th

    ,N_image

    FROM tblart

    WHERE N_image_desc LIKE '%' + @strSearch + '%'

    OR N_image_name LIKE '%' + @strSearch + '%'

    OR N_image_number LIKE @strSearch

    ORDER BY N_image_order ASC;