Database

daku1 wrote:

how to create sp for username and password

CREATE PROCEDURE ValidateProcedure
(
	@Username varchar(20),
	@Password varchar(20)
)

AS

Select * From UserTable Where UserNameColumn = @Username and PasswordColumn = @Password

GO

SELECT SUBSTRING(ColA, 10) AS ColumnA, SUBSTRING(ColB, 10) AS ColumnB FROM TABLE

Navaneethkn wrote:

What is your opinion about writing dynamic SQL statements in stored procedure ?

Navaneethkn wrote:

Set @SQL = 'select * from table'
Exec (@SQL)

is it a good practice ?

Frank Kerrigan wrote:

If you are intranet or backend system with no user front end supplying parameters then you can prob take the risk.

SELECT FirstName, LastName, Age, ...
FROM MyTable
WHERE (FirstName = @FirstName OR @FirstName IS NULL)
AND (LastName = @LastName OR @LastName IS NULL)
AND (Age = @Age OR @Age IS NULL)...

if (string.IsNullOrEmpty(firstNameTextBox.Text))
    myCommand.Parameter.Add("@FirstName", DbNull.Value);
else
    myCommand.Parameter.Add("@FirstName, firstNameTextBox.Text);