Plz help me to solve

Question

Hi..
I m getting problem when i executing the below proc..
I m taking the string of personid's from frntend and as our COM doesn't support ',' i getting the values seperated by pipe '|' and in proc i m repalcing it to ',' and den i have to chk it in IN condition and take all da records in a Cursor and i hav return bac.. But when i hardcoding the values i m getting result but when i using da variable string it is nt fecthing data..plz help me
CREATE OR REPLACE PROCEDURE prn_tst(strVal IN     VARCHAR2)
     AS
          strl VARCHAR2(40);
          cur SYS_REFCURSOR;
          strname VARCHAR2(60);
     BEGIN
          SELECT REPLACE(strval,'|',',') INTO strL FROM DUAL;
          DBMS_output.put_line(strL);
          SELECT (REPLACE(strl,'+','''')) INTO strL FROM DUAL;
          DBMS_output.put_line(strL);
          OPEN cur FOR          
               SELECT name
               FROM cmnperson
               WHERE TO_CHAR(personid) IN (strL);     
          LOOP
               FETCH cur INTO strname;
               EXIT WHEN cur%NOTFOUND;
               DBMS_output.put_line('IN' || strname);
          END LOOP;
          SELECT name
          INTO strname
          FROM cmnperson
          WHERE TO_CHAR(personid) IN (TRIM(strL));
          DBMS_output.put_line('IN' || strname);
     END prn_tst;

Answer 1

i have this procedure it is giving err when i m compling
PLS-00103: Encountered the symbol "))
INNER JOIN PRGNOSSPROGRAM
ON
CDTAPPLICATION.progr" when expecting one of the following:
( - + case mod new null <an identifier>
<a double-quoted delimited-identifier> <a bind variable> avg
count current max min prior sql stddev sum variance execute
forall merge time timestamp interval date
<a string literal with character set specification>
<a number> <a single-quoted SQL string> pipe
CREATE OR REPLACE PROCEDURE prn_ACCertPrintRep(strCandidateid In Varchar2,
                              strAccode In Cdtapplication.accode %TYPE,
                    strBatchNo In Cdtapplication.batchno %TYPE,
                              cur_GetCertDetails Out SYS_REFCURSOR)
     AS
     strtemp Varchar2(50);
     strlist Varchar2(50);
     strFinalList Varchar2(50);
     strCode Varchar2(20) :='PC';
     BEGIN
     SELECT replace(strCandidateid,'|',',')
          INTO strtemp
     FROM dual;
     SELECT replace(strtemp,'-','''')
          INTO strlist
     FROM dual;
     dbms_output.put_line(strlist);     
     OPEN cur_GetCertDetails
          FOR                    
          'SELECT cdtapplication.programcode As PrgCode,
               programname,
          programlevel,
          cmnperson.name As PersonName,
          icnumber,     
          acname,
          accenter.town As Town,
          sctstate.name As State
          FROM (CDTAPPLICATION
          INNER JOIN CDTPPLEVALUATIONH
               ON
                    CDTAPPLICATION.candidateid = CDTPPLEVALUATIONH.candidateid
               AND
                    UPPER(TRIM(CDTAPPLICATION.wfstatuscode)) = ' || strCode || ')
               AND
                    TO_CHAR(CDTAPPLICATION.candidateid) IN (' || strlist || ')
          INNER JOIN ACCENTER
               ON
                    CDTAPPLICATION.accode = ACCENTER.accode
               AND
                    UPPER(TRIM(CDTAPPLICATION.accode)) = UPPER(TRIM(' ||strAccode || '))
               AND
                    UPPER(TRIM(CDTAPPLICATION.batchno)) = UPPER(TRIM(' ||strBatchNo ||'))
          INNER JOIN PRGNOSSPROGRAM
               ON
                    CDTAPPLICATION.programcode = PRGNOSSPROGRAM.programcode
          INNER JOIN CMNPERSON      
               ON
                    CDTAPPLICATION.personid = CMNPERSON.personid)
          INNER JOIN SCTSTATE
               ON
                    ACCENTER.statecode = SCTSTATE.statecode;
     END prn_ACCertPrintRep;