vBulletin Search Engine Optimization
| |||||||
| Register | FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
| |||
| fireball wrote: > please, in simple words, what is difference between : > sp_executesql > and > EXECUTE > > > > in sql2005 > ? http://www.sommarskog.se/dyn-search.html#dynsql |
| |||
| fireball (fireball@onet.kropka.eu) writes: > please, in simple words, what is difference between : > sp_executesql > and > EXECUTE sp_executesql gives you the possibility to use parameterised statements, EXEC() does not. Parameterised statements have two important advantages: o No risk for SQL injection. o Better plan reuse in the plan cache. For more details on this point, I have an article on my web site that goes into detail on dynamic SQL, http://www.sommarskog.se/dynamic_sql.html. -- Erland Sommarskog, SQL Server MVP, esquel@sommarskog.se Books Online for SQL Server 2005 at http://www.microsoft.com/technet/pro...ads/books.mspx Books Online for SQL Server 2000 at http://www.microsoft.com/sql/prodinf...ons/books.mspx |
| Thread Tools | |
| Display Modes | |
|
|