I have the following stored procedure with four parameters.
Stored procedure spTest
:
CREATE PROCEDURE spTest
@Name varchar(20) = \'\
It's called catch-all queries and it basically goes like this:
CREATE PROCEDURE spTest
@Name varchar(20) = '',
@Address varchar(100) = '',
@City varchar(50) = '',
@Pin varchar(50) = ''
AS
SELECT *
FROM Test_Table
WHERE (@Name = '' OR Name = @Name)
AND (@Address = '' OR Address = @Address)
AND (@City = '' OR City = @City)
AND (@Pin = '' OR Pin = @Pin);
GO
You also might want to read this article about catch all queries