Koen Verbeeck (6/2/2014)
Parameters cannot be expressions.
That's step one, for sure. Step 2 is that the variable is assigned no value and will always return a NULL for the result of the concatentation. Step 3 is that the variable if the variable is provided from sources external to the proc, a check needs to be done for SQL Injection.
--Jeff Moden
Change is inevitable... Change for the better is not.