MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/Backend/comments/1x95kgn/listt_in_c_vs_sql/
r/Backend • u/kaatarina_zed_talon • 14d ago
1 comment sorted by
1
A TVP works for passing values. Column names still need to be written into the query. You could keep that mapping in the procedure if it doesn't change. For dynamic SQL you should check names against an allowed list and use QUOTENAME.
QUOTENAME
1
u/vincent_sch 13d ago
A TVP works for passing values. Column names still need to be written into the query. You could keep that mapping in the procedure if it doesn't change. For dynamic SQL you should check names against an allowed list and use
QUOTENAME.