SQL Server is one of the best products to come out of Microsoft, but not every professional knows how to use it effectively. For example, some might find it difficult to create a stored procedure but ...

I recently wrote a .NET web application for work. I always make a data access class with methods for getting data, but I usually just point the methods to stored procedures. This time, I decided to ...

By creating an ad-hoc SQL statement and passing it to the EXECUTE function in the stored procedures, we can create SQL-injectable stored procedures. This is even easier to do when you use managed code ...