I'm receiving a String query with query params (via URL), and one is mandatory and seven are optional. So if i don't receive a param, shouldn't be included in the query.

For instance:

My code is:

List<customObject__c> lstCstObj = [SELECT customField1__c, customField2__c, customField3__c, customField4__c, customField5__c FROM customObject__c WHERE customField2__c =: strVar1 + strCondition];

The value of strVar1 is the result of:


The value of strSurname is:

String strSurname = String.valueOf(RestContext.request.params.get('surname'));

And that give us the value of The value of strCondition (here is the problem) wich is:

String strCondition = '';    
if(strSurname !=null){
   strCondition = strCondition + ' AND (customField3__c =\''+ strSurname+ '\' OR customField3__c =\'' + strSurname+ '\' OR customField3__c =\''+ strSurname+'\')';

So if i write that it works, but obviously i can't because it's not a fixed value, depends of the query param:

SELECT customField1__c, customField2__c, customField3__c FROM customObject__c WHERE customField2__c =: strVar1 AND (customField3__c ='Doe' OR customField4__c='Doe' OR customField5__c='Doe')

The log returns:

strCondition:  AND (customField3__c ='Doe' OR customField3__c ='Doe' OR customField3__c ='Doe')
  • 1
    Why is it obvious you can't? Nothing in your question is obvious. Is your code a string? Maybe put in the full line of code, rather than just snippets. I imagine you're trying to do dynamic SOQL with a standard SOQL query.
    – Nick C
    Commented Aug 22, 2019 at 7:48
  • 1
    customField2__c =: strVar1 + strCondition - its not clear what you are doing - this is neither string nor direct SOQL. Can you show some more relevant code? Commented Aug 22, 2019 at 8:04

1 Answer 1


The following syntax is not a dynamic query:

List<customObject__c> lstCstObj = [SELECT ... FROM ...];

What you need is a dynamic query. A dynamic query normally looks like:

String myQuery = 'SELECT ... FROM ...';
List<customObject__c> lstCstObj = Database.query(myQuery);

What you're after is probably something like:

// get the parameters
String strVar1 = String.valueOf(RestContext.request.params.get('name'));
String strSurname = String.valueOf(RestContext.request.params.get('surname'));

// create the query string
String myQuery = 'SELECT customField1__c, customField2__c, customField3__c, customField4__c, customField5__c FROM customObject__c WHERE customField2__c = :strVar1';

// add in the surname if it exists
    myQuery += ' AND (customField3__c = \'' + String.escapeSingleQuotes(strSurname) + '\' OR customField4__c = \'' + String.escapeSingleQuotes(strSurname) + '\' OR customField5__c = \'' + String.escapeSingleQuotes(strSurname) + '\')';

List<customObject__c> lstCstObj = Database.query(myQuery);
  • Thanks Nick, except for: WHERE customField2__c = :strVar1'; that should be WHERE customField2__c =\' '+ strVar1 +'\' '; everything works perfect. Really appreciated. Commented Aug 22, 2019 at 9:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .