>>>>If you read the question carefully, you'll see the following statement: It's possible for any combination of parameters to be passed. How do I change the WHERE clause to handle this?
>>>>
>>>>Notice the "its possible for ANY COMBINATION OF PARAMETERS". How do you account for getting 1 or 5 or 15?
>>>
>>>The original question only lists 3 parameters in an SP. How you're going to loop parameters in T-SQL?
>>
>>He didn't say ANY COMBINATION OF THE 3 PARAMETERS. Who said anything about t-sql? You create the dynamic sql statement in your code and execute it as a sql command. We do this alot. Also, there are ways of creating the dynamic sql in t-sql also, but I guess that is beyond basic t-sql.
>
>I guess we read the question completely differently. He posted an SP and I assumed we want to be able to handle NULL (empty) parameters in this SP.
>
>We can generate dynamic SQL in the code, of course, but then we should take measures against SQL injection attacks.


You know.. .I'm done with this thread. I'll leave it up to you to solve his problems since you appear to have all the answers.... Have fun...