Stored Procedures, Functions, and Security

Abstract

Now that you know how to build queries written as single executable lines of T-SQL statements, it is time to look at how to place these into a stored procedure or a function within SQL Server, allowing them to be run as often as they are required without the need to be retyped every time. This also allows code to be written that can accept input parameters, return a status, return rows of data, and, most important, allow you to improve the security of your database. You will see all of this and more in this chapter.