3

Can you please guide me why dynamic SQL is suggested to avoid ? Is there any way that I can keep on using dynamic SQL and avoid its bad things ?

Ozair Kafray
  • 13,142
  • 8
  • 54
  • 80
user576510
  • 5,617
  • 18
  • 75
  • 140

2 Answers2

4

http://www.sommarskog.se/dynamic_sql.html

If you don't understand everything in this, come back and ask a question, but under no circustances should you use dynamic SQl until you understand this article.

HLGEM
  • 91,883
  • 14
  • 110
  • 181
1

The main problem is sql injection. People can enter data that can change the intent of your sql.

One of the best solutions is to use sp_executesql. http://msdn.microsoft.com/en-us/library/ms188001.aspx

Scott Bruns
  • 1,921
  • 12
  • 12