Dynamic SQL lets you create a query string based off of user input. SQL Server allows you to create dynamic SQL statements. The statements use a SQL string varchar data type, then you execute the ...

If the user enters data with an apostrophe into a text box, and you attempt to build and SQL string to execute, you get something like this in your string:<BR><BR><B>INSERT INTO MyTable ...