thanks peterhe!

Yes, I agree "It's a best practice to always explicitly give the column names in the select and insert statement."

SP and table were sort of quick test for...

select value1,value2,value3 from table t

where (t.value = @param1 or @param1 is null)

t.value is the column which matches your searc criteria