Hi JLSSCH,

These sample procedures were expecting that the caller will add the necessary wildcard pattern to the variable being passed. If you look at the code that calls the stored...

Yes, I agree that "...protects from almost every possible sql injection..." is some what misleading.

Paremeterization helps to prevent SQL injection to a good extend. sp_executesql helps to execute parameterized...

I dont think it will make much difference. However, i would suggest reading this article: http://sqlblog.com/blogs/adam_machanic/archive/2006/07/12/performance-isnull-vs-coalesce.aspx

Thank you David. I will try to do that.

Hi Nick,

Infact, i did not suggest that non-dynamic method is better. See my note...

Hi Nick. Thank you for the feed back. This is what I expected when I said 'I am expecting sql experts to jump in and share their views'.

It looks like...

Glad to know it helped you to solve your problem. That is the real point.

Have a great day!

I am falling asleep 🙂

Pls replace the smily icon with a ")"

Does this give you the required output?

SELECT

c.ID,

c.CaseName,

'boolean' AS "Mappings/@AutoCleanup",

'boolean' AS "Mappings/@PreserveExistingRecords",

...

could you post the script to create the tables and some test data?

Thank you Jeff!

I dont have a 64 bit server on which I could test it. The RC0 download page has 64 bit download too. http://www.microsoft.com/downloads/details.aspx?FamilyId=35F53843-03F7-4ED5-8142-24A4C024CA05&displaylang=en

Hence I am pretty sure...

Its worth pointing out that (at least so far as I can tell) the very nice missing index feature in the graphical execution plan only works when connected to SQL...

Yes, the activity monitor and index hint are available when you are connected to a SQL Server 2005 instance.

Intellisense, (which I have not mentioned here) was available earlier, but in...