Lesson #5: Conclusion - Summary Overview

Lesson 6 of 6 • 0 upvotes • 13:47mins

Sourav Mukherjee

In general, accurately functional parameterization can support in security for SQL Server and can have performance implications. Nonetheless, some queries cannot be fully parameterized for example when the column names, table names, or any other clauses need to be added or adapted dynamically. When the non-parameterized dynamic SQL is used, the performance and security implications are required to be kept in mind.