title: Is it possible to parameterize table and column names in SQLite queries?
body: <p>Im trying to perform a parameterized query in SQLite from C#, and the method im using is along the lines of creating a static command with </p>
  
  <pre><code>        SQLiteCommand cmd = new SQLiteCommand(
          "SELECT [ID]" +
              ",[email]" +
              ",[serializedata]" +
              ",[restrictions]" +
          " FROM " + UserTable +
          " WHERE @search = @searchparam", SQLConnection);
  
          cmd.Parameters.Add(new SQLiteParameter("@searchparam"));
          cmd.Parameters.Add(new SQLiteParameter("@search"));
  </code></pre>
  
  <p>and calling it like this:</p>
  
  <pre><code>        Command.Parameters["@searchparam"].Value = searchdata;
          Command.Parameters["@search"].Value = search;
          SQLiteDataAdapter slda = new SQLiteDataAdapter(UserSelectUsernameCommand);
          DataSet ds = new DataSet();
          slda.Fill(ds);
          User[] array = new User[ds.Tables[0].Rows.Count];
          int index = 0;
          foreach (DataRow row in ds.Tables[0].Rows)
          {
              array[index] = new User(this, row);
              index++;
          }
          return array;
  </code></pre>
  
  <p>but im getting an error along the line of " '@search' is not a correct column name " or something like that. if i use a constant column name, and only use the data for parameters it works, but i dont want to create 10 different commands for when i need to search by different column names.</p>
  
  <p>What is the issue here?</p>