Hello GilaMonster,

in this example I don't get any inputs from the user I just get his username programmatically by code so I don't think he has a chance to inject...

Perfect solution

Thank you so much

so I missed the 'cast' function and I think it works as you have used it in this example

Thanks Dev

the @user-id has a Uniqueidentifier value which I got from the 1st sql statement so it must have a '-' after each four characters 🙂

Thanks lmu92 for your reply

You put me on the start point, I will keep searching...

I hope if you have some examples to put the links to see it because I'm...