Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
AskSQLTeam
Ask SQLTeam Question
0 Posts |
 Posted - 2004-01-30 : 07:18:07
|
| faisal writes "hello, i want to use a stored procedure to which i pass on only a string type variable having a sql query.is it possible if yes then how?" |
|
|
robvolk
Most Valuable Yak
15732 Posts |
Posted - 2004-01-30 : 07:19:24
|
| It's possible, and it's a really bad practice. Don't do it. There's no point in using a stored procedure for this, and doing so would allow for security breaches, SQL injection, and other types of hacking. |
 |
|
|
|
|
|
how can i use dynamic sql statements for stored procedures?