I need to write a stored procedure for SQL Server 2008 to execute a large query select, and I need it to filter the results by indicating the type of filtering using the procedure parameters. I found several such solutions:
create table Foo(
id bigint, code char, name nvarchar(max))
go
insert into Foo values
(1,'a','aaa'),
(2,'b','bbb'),
(3,'c','ccc')
go
create procedure Bar
@FilterType nvarchar(max),
@FilterValue nvarchar(max) as
begin
select * from Foo as f
where case @FilterType
when 'by_id' then f.id
when 'by_code' then f.code
when 'by_name' then f.name end
=
case @FilterType
when 'by_id' then cast(@FilterValue as bigint)
when 'by_code' then cast(@FilterValue as char)
when 'by_name' then @FilterValue end
end
go
exec Bar 'by_id', '1';
exec Bar 'by_code', 'b';
exec Bar 'by_name', 'ccc';
I find this approach does not work. You can cast all the columns in nvarchar(max)and compare them as rows, but I think this will lead to poor performance.
Is it possible to parameterize a sentence wherein a stored procedure without using constructs such as EXEC sp_executesql?
source
share