http://www.sqlservercentral.com/Content tagged T-SQL, Basic Querying, Security posted on SQLServerCentral.comen-us360sjones@sqlservercentral.com (Steve Jones)We've had a lot of coverage of dynamic sql (including another great one from Robert Marda later this week) but this one is a little different. Done in a question/answer format, Andy tries to explain to junior developers why dynamic sql is to be avoided, how to do so, what to do when you can't. http://www.sqlservercentral.com/articles/Performance+Tuning/dynamicsqlorstoredprocedure/969/2005/08/26http://www.sqlservercentral.com/articles/Performance+Tuning/dynamicsqlorstoredprocedure/969/We've had a lot of coverage of dynamic sql (including another great one from Robert Marda later this week) but this one is a little different. Done in a question/answer format, Andy tries to explain to junior developers why dynamic sql is to be avoided, how to do so, what to do when you can't. http://www.sqlservercentral.com/articles/Performance+Tuning/dynamicsqlorstoredprocedure/969/2005/08/26http://www.sqlservercentral.com/articles/Performance+Tuning/dynamicsqlorstoredprocedure/969/A monster book at 980 pages, it's written in 'how-to' format and has a ton of good material. Andy gave it the once over for us and reports back - see what he thinks! http://www.sqlservercentral.com/articles/Installation/reviewofsql2000fastanswers/959/2003/04/18http://www.sqlservercentral.com/articles/Installation/reviewofsql2000fastanswers/959/Andy sits down with an entry level book to see if he should use it at work as a teaching aid. Did he like it? Should you buy it? Read the review now! http://www.sqlservercentral.com/articles/Installation/reviewofsqlserver2000programmingmspress/694/2002/06/04http://www.sqlservercentral.com/articles/Installation/reviewofsqlserver2000programmingmspress/694/Sooner or later everyone who works with SQL Server hears that it is better to avoid dynamic SQL at all cost. Dynamic SQL will force you to give out more permissions than static SQL. This article by Robert Marda shows you some of the security issues with dynamic SQL. http://www.sqlservercentral.com/articles/Security/dynamicsqlversusstaticsqlp1/617/2002/02/27http://www.sqlservercentral.com/articles/Security/dynamicsqlversusstaticsqlp1/617/