How To Pass String Variable In Dynamic Sql Query