I strongly recommend that you use one procedure for one thing. No dynamic code. Or use an ORM for those drop downs
Yes, it's some up-front work, but it makes it easier later when you need to do something special in one case. And it's not vulnerable to having your entire database stolen or deleted (or both)