Problem in EXECUTE IMMEDIATE

Question

I need to update certain columns of a table .
But the columns are dynamic. i can update 1,20r 3 or more columns of that table.
I tried executing with the Execute immediate statement.
But i am getting the error (ORA-01747)
:1(below in code) Contains the column name along with the values. (Example:Column2=Column2.value,Column3=Column3.value)
There can be more than 3 or more columns to be updated.
CREATE OR REPLACE PROCEDURE PR_Bulk_CA(pn_SSCA_ID_VARRAY          BULK_UPDATE_CA_VARRAY
                                      ,pv_set_string              Varchar2
                                      ,pn_success                 OUT number
                                      Is
sql_stmt  VARCHAR2(32000);
BEGIN
sql_stmt:= 'update table_A
               SET :1
           WHERE  ID IN (select ID from table_A ca
                   where  ca.status in (20700,20710,20720)
                     and  ca.id in (select * from table(:2)))';
EXECUTE IMMEDIATE sql_stmt USING pv_set_string,pn_SSCA_ID_VARRAY;                     
COMMIT;
pn_success:=0;
EXCEPTION
    WHEN OTHERS THEN
pn_success:=-1;
END PR_Bulk_CA;

Answer 1

So?
By concatenating the column-name-update-string to the rest of the dynamic statement you get what you want.
if your pv_set_string has:
  column_a = 17, column_b = 15, column_c = 12in it, the statement generated will handle this...
I did not state not to do dynamic sql but not to pass the column names using bind variables, as this will not work. The reason therefore is, that the parser need to know the names of the columns to figure out, whether you passed a syntactical correct statement. The parser will not know the content of a bind variable as this is not needed for the syntax (and access rights) check.
hth