Hi,
  can anyone tell how to pass the table name from asp to sql server stored procedure which contains the SELECT * FROM /tablename passed/

Hi KGANESH2006 !!

in this case you need to create dynamic string for query .
.when you passe tablename in storedprocedure you need to append it into the query string in SP, then use exec(stringSql) method in order to execute the dynamic build query named stringSql
Hope this will help you


Cheers :)

vinod

When you execute Dynamic SQL you need to be aware of how to prevent SQL Injection Attacks.
See here for an example http://www.unixwiz.net/techtips/sql-injection.html


David Lundell
Principal Consultant and Trainer
www.mutuallybeneficial.com

Hi David,
  Excellent link for sql injection attacks.

Thanks Again

Cheers :)

vinod