T-SQL

Technical Article

Using Dynamic SQL in Stored Procedures

  • Article

Dynamic SQL allows stored procedures to “write” or dynamically generate their SQL statements. The most common use case for dynamic SQL is stored procedures with optional parameters in the WHERE clause. These are typically called from reports or screens that have multiple, optional search criteria. This article describes how to write these types of stored procedures so they execute well and resist SQL injection attacks.

You rated this post out of 5. Change rating

2011-03-22

7,301 reads

Blogs

New article – migrating from a named instance

By

Do you have a case where you have a named instance you'd like to...

Using the SIGN() Function: #SQLNewBlogger

By

I was trolling the docs and noticed the SIGN() function. I have never written...

T-SQL Tuesday #201 Round-Up: Temp Tables, Friend or Foe?

By

The T-SQL Tuesday #201 round-up: nine bloggers on whether temp tables are a friend...

Read the latest Blogs

Forums

Admin Rights for Everyone

By Steve Jones - SSC Editor

Comments posted to this topic are about the item Admin Rights for Everyone

Kerberos Authentication for Aurora PostgreSQL: Mapping AD Groups to Database Roles

By Arvind Toorpu

Comments posted to this topic are about the item Kerberos Authentication for Aurora PostgreSQL:...

RegEx Functions I

By Steve Jones - SSC Editor

Comments posted to this topic are about the item RegEx Functions I

Visit the forum

Question of the Day

RegEx Functions I

Which of these RegEx functions need compatibility level 170 in SQL Server 2025?

See possible answers