GilaMonster (9/28/2013)

---

All of the posted code is vulnerable to SQL injection. Please, please, for the third or fourth time, read up on SQL injection and don't use dynamic SQL until...

sexID int

statusID int

firstname varchar(20)

middlename varchar(20)

lastname varchar(20)

that is in my table

set ANSI_NULLS ON

set QUOTED_IDENTIFIER ON

go

-- =============================================

-- Author:<Author,,Name>

-- Create date: <Create Date,,>

-- Description:<Description,,>

-- =============================================

ALTER PROCEDURE [dbo].[SearchBiography]

@firstname nvarchar(50),

@middlename nvarchar(50),

@lastname nvarchar(50),

@sexID...

pietlinden (9/28/2013)

---

The correct use for dynamic SQL is Option 1: DON'T, especially if you're a noob.

If you understand the repercussions of code that can't be optimized, and SQL injection attacks,...

Cadavre (9/27/2013)

---

enriquezreyjoseph (9/27/2013)

---

Cadavre (9/27/2013)

---

You're also vulnerable to SQL injection. Please look over the...

Cadavre (9/27/2013)

---

Why not build up your WHERE clause like this?

ALTER PROCEDURE [dbo].[SearchBiography] @firstname NVARCHAR(50), @middlename NVARCHAR(50), @lastname NVARCHAR(50), @sexID NCHAR(1), @statusID NCHAR(1) AS

BEGIN;

SET NOCOUNT ON;

...

Sean Pearce (9/27/2013)

---

The table can contain varchar columns but the statement must be...

i hope this will help

http://www.sqlsoldier.com/wp/sqlserver/day24of31daysofdisasterrecoveryhandlingcorruptioninaclusteredindex

EarnestGoesWest (9/27/2013)

---

Hi,

I've recently implemented a new DBCC INTEGRITY check process running a combination of CHECKDB (for the smaller databases) and CHECKTABLE for larger - spread over a few days.

During...

jatighe (9/27/2013)

---

Hi

I am having problems with the "Duplicate key was ignored" warning message. The problem is that the message seems to happen randomly and cannot be reproduced. If i...

Cadavre (9/27/2013)

---

You're also vulnerable to SQL injection. Please look over the code I...

Thank you guys..

so, i should change varchar now to my whole table and to my front-end...tsk :-(..

dwain.c (9/27/2013)

---

enriquezreyjoseph (9/27/2013)

---

SET @sqlquery = ' SELECT * FROM TestMyView ' +

CASE

...

this is it

set ANSI_NULLS ON

set QUOTED_IDENTIFIER ON

go

-- =============================================

-- Author:<Author,,Name>

-- Create date: <Create Date,,>

-- Description:<Description,,>

-- =============================================

ALTER PROCEDURE [dbo].[SearchBiography]

...