------
1. 권장- 동적쿼리파라메터캐싱 ---------
create proc upcl_text_tmp (
@user_id varchar(25)
) as
declare @sql nvarchar(max), @params nvarchar(500);
set @params = N'@user_id varchar(25)';
set @sql = 'select user_id from
hunetc.dbo.thu_user_login where user_id = @user_id'
execute sp_executesql @sql, @params, @user_id = @user_id;
------
2. 동적쿼리 파라메터 캐싱 안됨---------
create proc upcl_text (
@user_id varchar(25)
) as
declare @sql nvarchar(max)
set @sql = 'select user_id from
hunetc.dbo.thu_user_login where user_id = ''' +
@user_id + ''''
execute sp_executesql @sql