Tip of the day, from coworker’…

Tip of the day, from coworker’s code: Do not accept a string parameter to a stored procedure then use it to build a sql query to execute.