Using Dynamic SQL

Today Steve notes that Dynamic SQL can be helpful, but it's a technique you should understand well before you start using it.

Execute Dynamic SQL commands in SQL Server

In some applications having hard coded SQL statements is not appealing, because of the dynamic nature of the queries being issued against the database server. This is where dynamically building SQL statements can be useful.

Dynamic SQL for beginners in 33 minutes

Learn some of the basics of using Dynamic SQL in a short series of videos.

Dos and Don'ts of Dynamic SQL

A few of my personal Dos and Don'ts when using Dynamic SQL

Loading CSV Files Using Dynamic SQL

In this article, we will see of a quick way to load CSV files from a directory on your computer.

Using Dynamic SQL in Stored Procedures

Dynamic SQL allows stored procedures to “write” or dynamically generate their SQL statements. The most common use case for dynamic SQL is stored procedures with optional parameters in the WHERE clause.

Self SQL Injection

Based on a real fact, this article demonstrates how a bad use of sp_executesql can lead to unpleasant surprises

A Simple Introduction to Dynamic SQL

Dynamic SQL is essentially normal SQL written in such a way that you end up with a “customised” SQL script at run-time.

Dynamic SQL and TempTables

Execute Dynamic SQL commands in SQL Server

In some applications having hard coded SQL statements is not appealing, because of the dynamic nature of the queries being issued against the database server. Because of this sometimes there is a need to dynamically create a SQL statement on the fly and then run that command. This can be done quite simply from the application perspective where the statement is built on the fly whether you are using ASP.NET, ColdFusion or any other programming language. But how do you do this from within a SQL Server stored procedure?