SQL-DBA-01 (5/27/2015)
if in the string (passwed) if tge DBA/user passes one or two quotes, could be a trouble.
Not if you use REPLACE.
Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability