Comments by Member 9831003 (Top 5 by date)

you can try below code.

DECLARE @Inserttbl nvarchar(4000)
DECLARE @TableName varchar(50)
DECLARE @Text varchar(50)
--DECLARE @count int
SET @TableName = 'test'
SET @Text = NULL

if (@Text is not null)
begin
SET @Inserttbl = ' Insert into dbo.' + @TableName + ' values (3,' +''''+@Text+'''' + ',1)'

EXEC sp_executesql @Inserttbl
end
else
begin
Print 'NULL Value will not inserted'
end

And yes there is possibility of sql injection even under sp_executesql. Check below link also for validating your parameter
https://msdn.microsoft.com/en-us/library/ms161953(SQL.105).aspx

try with xml data type. Check below link may be help full
http://stackoverflow.com/questions/2497678/storing-json-in-an-mssql-database

Thanks, if possible can you please make some insert statement for these tables.

Send your table schema with sample data