String quoting and concatenation differences in SQL - Cheat Sheet & Quick Revision

Recall & Review

beginner

What type of quotes are used in SQL to represent string literals?

Single quotes (' ') are used to represent string literals in SQL. Double quotes (" ") are typically used for identifiers like column or table names.

beginner

How do you concatenate two strings in standard SQL?

You use the double pipe operator (||) to concatenate strings in standard SQL. For example: 'Hello' || ' World' results in 'Hello World'.

intermediate

What happens if you use double quotes around a string in SQL?

Double quotes are used for identifiers, not strings. Using double quotes around a string will make SQL treat it as a column or table name, which can cause errors if that identifier does not exist.

intermediate

How do MySQL and PostgreSQL differ in string concatenation?

PostgreSQL uses the || operator for string concatenation. MySQL uses the CONCAT() function instead. For example, CONCAT('Hello', ' World') in MySQL vs 'Hello' || ' World' in PostgreSQL.

beginner

Why is it important to use the correct string quoting in SQL queries?

Using the correct quotes prevents syntax errors and SQL injection risks. Single quotes ensure strings are treated as data, while double quotes are for identifiers. Mixing them up can cause errors or security issues.

Which quotes should you use to write a string literal in SQL?

A No quotes

B Double quotes (" ")

C Backticks (` `)

D Single quotes (' ')

Single quotes are used for string literals in SQL.

How do you concatenate strings in standard SQL?

A Using + operator

B Using || operator

C Using CONCAT() function only

D Using & operator

The || operator is the standard SQL way to concatenate strings.

In MySQL, how do you concatenate 'Hello' and 'World'?

A CONCAT('Hello', 'World')

B 'Hello' || 'World'

C 'Hello' + 'World'

D 'Hello' & 'World'

MySQL uses the CONCAT() function for string concatenation.

What does double quotes around a word mean in SQL?

A Comment

B String literal

C Identifier like column or table name

D Number

Double quotes are used for identifiers in SQL.

What is a risk of using wrong quotes in SQL queries?

A All of the above

B SQL injection

C Syntax errors

D Wrong data retrieval

Wrong quotes can cause syntax errors, security risks, and wrong results.

Explain the difference between single and double quotes in SQL and why it matters.

Think about how SQL treats data vs names.

Describe how string concatenation differs between standard SQL, MySQL, and PostgreSQL.

Focus on operators and functions used.

Practice

1. In SQL, which of the following is the correct way to write the text string Hello?

easy

A. Use double quotes: "Hello"

B. Use single quotes: 'Hello'

C. Use backticks: `Hello`

D. No quotes needed: Hello

Solution

1. Step 1: Understand SQL string quoting rules

   In SQL, text strings must be enclosed in single quotes to be recognized as string literals.

2. Step 2: Identify correct quoting for text

   Double quotes are for identifiers like column names, backticks are MySQL-specific for identifiers, and no quotes means a column or keyword.

3. Final Answer:

   Use single quotes: 'Hello' -> Option B

4. Quick Check:

   Text strings = single quotes [OK]

Hint: Text strings always use single quotes in SQL [OK]

Common Mistakes:

• Using double quotes for text strings
• Using backticks for text strings
• Not using any quotes for text

2. Which of the following SQL statements correctly concatenates the strings 'Hello' and 'World'?

easy

A. SELECT CONCAT('Hello', 'World');

B. SELECT 'Hello' + 'World';

C. SELECT 'Hello' || 'World';

D. SELECT 'Hello' & 'World';

Solution

1. Step 1: Know SQL string concatenation operators

   Standard SQL uses || to join strings. Some databases use CONCAT() function.

2. Step 2: Check each option

   SELECT 'Hello' + 'World'; uses + which is not standard SQL for strings. SELECT 'Hello' || 'World'; uses || which is correct in standard SQL but not supported in all databases. SELECT CONCAT('Hello', 'World'); uses CONCAT() which is valid and widely supported in many databases. SELECT 'Hello' & 'World'; uses & which is invalid.

3. Final Answer:

   SELECT CONCAT('Hello', 'World'); -> Option A

4. Quick Check:

   CONCAT() is widely supported for string concatenation [OK]

Hint: Use CONCAT() function for portable string concatenation [OK]

Common Mistakes:

• Using + for string concatenation
• Using & for string concatenation
• Confusing CONCAT() with operator

3. What is the output of this SQL query?

SELECT 'SQL' || ' ' || 'Rocks' AS message;

medium

A. SQL|| ||Rocks

B. 'SQL Rocks'

C. 'SQL' ' ' 'Rocks'

D. SQL Rocks

Solution

1. Step 1: Understand string concatenation with ||

   The operator || joins strings without adding extra quotes in the output.

2. Step 2: Evaluate the concatenation

   'SQL' + ' ' + 'Rocks' becomes the string SQL Rocks without quotes in the result display.

3. Final Answer:

   SQL Rocks -> Option D

4. Quick Check:

   Concatenated string shows without quotes in output [OK]

Hint: Concatenation joins strings; output shows text without quotes [OK]

Common Mistakes:

• Expecting quotes around output string
• Confusing concatenation operator with plus sign
• Misreading output as literal code

4. Identify the error in this SQL statement:

SELECT "Hello" || 'World';

medium

A. Double quotes around Hello cause a syntax error

B. Using || operator is invalid

C. Single quotes around World cause error

D. No error, statement is correct

Solution

1. Step 1: Understand quoting rules for strings and identifiers

   Double quotes are for identifiers (like column names), not string literals. Using them around text causes error.

2. Step 2: Check the statement

   "Hello" is treated as an identifier, which likely does not exist, causing an error. Single quotes around 'World' are correct. || operator is valid.

3. Final Answer:

   Double quotes around Hello cause a syntax error -> Option A

4. Quick Check:

   Double quotes = identifiers, not strings [OK]

Hint: Use single quotes for text, double quotes for names [OK]

Common Mistakes:

• Using double quotes for string literals
• Thinking || operator is invalid
• Confusing single and double quotes

5. You want to create a SQL query that returns the full name by joining first name and last name columns with a space in between. Which of the following is the best and most portable way to do this?

hard

A. SELECT first_name + ' ' + last_name FROM users;

B. SELECT first_name || ' ' || last_name FROM users;

C. SELECT CONCAT(first_name, ' ', last_name) FROM users;

D. SELECT first_name & ' ' & last_name FROM users;

Solution

1. Step 1: Understand string concatenation portability

   Different databases support different concatenation methods: || is standard but not supported everywhere; CONCAT() is widely supported.

2. Step 2: Evaluate options for portability

   SELECT first_name + ' ' + last_name FROM users; uses + which works in some but not all databases. SELECT first_name || ' ' || last_name FROM users; uses || which is standard but not supported in all (e.g., SQL Server). SELECT CONCAT(first_name, ' ', last_name) FROM users; uses CONCAT() which is supported in most modern databases. SELECT first_name & ' ' & last_name FROM users; uses & which is invalid.

3. Final Answer:

   SELECT CONCAT(first_name, ' ', last_name) FROM users; -> Option C

4. Quick Check:

   CONCAT() is most portable for string join [OK]

Hint: Use CONCAT() for portable string joining across databases [OK]

Common Mistakes:

• Using + operator assuming it works everywhere
• Using || operator without checking database support
• Using & operator which is invalid