SQL Server Programming Part 13 - Dynamic SQL

By Andrew Gould

You can view a written version of this tutorial at:

You can download the script to create the Movies database used in this video at the following link:

For more information on SQL injection attacks and how to prevent them you can't do better than Erland Sommarskog's definitive article:

For a geeky joke about dynamic SQL see XKCD:

You can see the range of resources and courses we offer in SQL Server here:

[zzLazaruszz]

Hi Andrew, just wanted to let you know how thankful I am that you made all this "out of the world" content available to us for free.

[navyahs]

Practical teaching has given a very good understanding of the concepts. The session covers all variations and contexts of dynamic SQL. Thank you for this.

[giorgimodebadze]

This is the best SQL Chane I have ever seen. Your video is really useful and helps me to understand everything about SQL.
thank you!

[TsiriniainaRakotonirina]

Oh Andrews, wow! This today's tutorial is a diamond my Man.
1. I always put a "+ N'" at the beginning and at the end of my Dynamic Sql. And it is a pain in the neck to maintain them.
You talk me today that I just need to add N'' only when I have a parameter between the Text. You saved my life

2. I didn't know that you can directly use the sp_executesql with parameters. That one is purely a blessing

Thank you so much! God bless you always for the free knowledge you are passing to us

[hkaui]

Brilliant video! Was really struggling with my book's explanation of this. This really cleared things up for me and actually explained what the concatenation was for!!! (Which my book didn't!)

[prasanthgmgks]

Genius. So easy to understand and very good examples. Thanks for the video

[krismaly]

I watched this video again and I love this video. Thanks

[jancrisrramos]

Hi Sir, it's a good tutorial for everyone, Specially for the Beginners :) thank you so much!

[alanelger]

Many thanks, your tutorials take a lot of beating

[simonm]

Thank you so much, this video helped me to solve work related issues!!!!

[BijouBakson]

Basically what you get here is a course on Dynamic SQL, and Inject, and some practice on concatenation stored procedure.

[krismaly]

I like this video and feature explained meaningfully. I love your video and teaching. I saw your focusing on the subject matter while teaching that is a must. It would be good to make intentional mistakes and overcoming the same by explaining may help some more knowledge to user it's my suggestion only. I hope you are going explain error handling in separate video. Error handling is very important in program and that is the hard part to learn. I wish you definitely make some EROR handling video.

[joshuaharvey]

Pretty sure at 19:20 the reason he isn't using CAST or CONVERT on the YearList is b/c of the commas. That may be obvious upon reading this but at first I didn't understand why that was the case so just clarifying for other's purposes.

[marlenefout]

I appreciate you
  videos so much!   I was lost in my Database Management class until I found your videos.  Seriously lost.  So thank you, thank you!!! 
I was hoping you had a video on catalog views, DMFs, DMVs, and indexing.  Do you have these?

[TheQciap]

Hi Andrew, another great video, it goes without saying.
Actually quick question that came to my mind - what is in your opinion the best source to improve topics from each lessons from your videos (eg where I could find more excercises to verify my skills  or more explanation )? Any idea?

[ipsitapani]

REALLY GREAT, THANKS ALOT, VERY NICE EXPLANATION.THANK U SO MUCH SIR.

[khanstr]

thanks, was waiting for this tutorial!

[MimiMimi-sikv]

wow it is amazing i really really appreciate it thank you so much GOD bless you!!!!

[mohamed-fatta]

thank you soo much i don't know how can i help u but, good work <3

[Unearthed]

Hey Andrew :-) Another GREAT, AWESOME video ... just curious, what fonts are you using for the Text editor and Grid Results?? ... thank you so much for these vids :-) take care