# Cannot use parameter in sql query **URL:** \ **Category:** Ignition\ **Tags:** ignition81\ **Created:** [December 12, 2024, 3:06pm UTC](https://forum.inductiveautomation.com/t/cannot-use-parameter-in-sql-query/99750 "2024-12-12T15:06:39Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Srushti\_Nagulwar](https://avatars.discourse-cdn.com/v4/letter/s/77aa72/32.png) [@Srushti\_Nagulwar](https://forum.inductiveautomation.com/u/Srushti_Nagulwar)\ **Post date:** [December 12, 2024, 3:06pm UTC](https://forum.inductiveautomation.com/t/cannot-use-parameter-in-sql-query/99750/1 "2024-12-12T15:06:39Z")
Hello Team, I am unable to pass parameter in sql query in reporting ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/8/1/81c1859b5c38a08d877e07436703fbf0c5a00880.png) can anyone help with this issue. Thanks, Srushti ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [December 12, 2024, 3:08pm UTC](https://forum.inductiveautomation.com/t/cannot-use-parameter-in-sql-query/99750/2 "2024-12-12T15:08:30Z")
You cannot use `?` substitutions for SQL structure (schema/table/column names, et cetera), only for values. ---
**Author:** ![Srushti\_Nagulwar](https://avatars.discourse-cdn.com/v4/letter/s/77aa72/32.png) [@Srushti\_Nagulwar](https://forum.inductiveautomation.com/u/Srushti_Nagulwar)\ **Post date:** [December 12, 2024, 3:14pm UTC](https://forum.inductiveautomation.com/t/cannot-use-parameter-in-sql-query/99750/3 "2024-12-12T15:14:49Z")
Hello @pturmel Thanks for you quick reply but I want to parameterize the column names from outside so is there any way to do it. ---
**Author:** ![dkhayes117](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/dkhayes117/32/68344_2.png) [@dkhayes117](https://forum.inductiveautomation.com/u/dkhayes117)\ **Post date:** [December 12, 2024, 3:37pm UTC](https://forum.inductiveautomation.com/t/cannot-use-parameter-in-sql-query/99750/4 "2024-12-12T15:37:13Z")
Set the parameter type to `QueryString` instead of `Value`. Be careful when you do this. You never want to expose these type of variables to the user because of SQL injection. However, you seem to be using the params for aliasing...not sure why that would be necessary. ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/0/0042799bed728418bbb1e6181f6be350edd1df8c.png) ---
**Author:** ![Srushti\_Nagulwar](https://avatars.discourse-cdn.com/v4/letter/s/77aa72/32.png) [@Srushti\_Nagulwar](https://forum.inductiveautomation.com/u/Srushti_Nagulwar)\ **Post date:** [December 12, 2024, 3:54pm UTC](https://forum.inductiveautomation.com/t/cannot-use-parameter-in-sql-query/99750/5 "2024-12-12T15:54:11Z")
Hello @dkhayes117 thank you for reply this parameter is different I want to do it using report parameters ---
**Author:** ![Srushti\_Nagulwar](https://avatars.discourse-cdn.com/v4/letter/s/77aa72/32.png) [@Srushti\_Nagulwar](https://forum.inductiveautomation.com/u/Srushti_Nagulwar)\ **Post date:** [December 12, 2024, 4:03pm UTC](https://forum.inductiveautomation.com/t/cannot-use-parameter-in-sql-query/99750/6 "2024-12-12T16:03:50Z")
![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/f/3fc186b45f0aa6e8f939fc58bf420ce143791da1.png) this is the error when I tried this method ---
**Author:** ![dkhayes117](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/dkhayes117/32/68344_2.png) [@dkhayes117](https://forum.inductiveautomation.com/u/dkhayes117)\ **Post date:** [December 12, 2024, 4:06pm UTC](https://forum.inductiveautomation.com/t/cannot-use-parameter-in-sql-query/99750/7 "2024-12-12T16:06:59Z")
More context is needed...a query would be nice. ---
**Author:** ![Srushti\_Nagulwar](https://avatars.discourse-cdn.com/v4/letter/s/77aa72/32.png) [@Srushti\_Nagulwar](https://forum.inductiveautomation.com/u/Srushti_Nagulwar)\ **Post date:** [December 12, 2024, 4:13pm UTC](https://forum.inductiveautomation.com/t/cannot-use-parameter-in-sql-query/99750/8 "2024-12-12T16:13:06Z")
"select tstamp,[EM1] as {M1},[EM2] as {M2} from Sulphonation\_KWH" this is the query in which M1 and M2 are parameters ---
**Author:** ![dkhayes117](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/dkhayes117/32/68344_2.png) [@dkhayes117](https://forum.inductiveautomation.com/u/dkhayes117)\ **Post date:** [December 12, 2024, 4:16pm UTC](https://forum.inductiveautomation.com/t/cannot-use-parameter-in-sql-query/99750/9 "2024-12-12T16:16:34Z")
Can you add a screenshot of your report/named query setup ---
**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\ **Post date:** [December 12, 2024, 4:18pm UTC](https://forum.inductiveautomation.com/t/cannot-use-parameter-in-sql-query/99750/10 "2024-12-12T16:18:42Z")
Why not just use your report parameters directly where you want to display these columns, and drop the (again, highly insecure) query string parameters from your named query?