I have some questions about this stored procedure.
1. This parameter thing you can send in to the sp_executeSql can only
handle things in the WHERE statements i guess? I cant send in for
example table names in there?
2. If i build the query with dynamic table names and dynamic where
statementsm (if input parameter has a value add this condition and so
on) will i still gain benefits from sp_executeSql? Or would i get the
same performande overhead as if i used Exec()?
3. If i just send in a SQL statement direct from ASP and then just