"Dynamic SQL is a powerful tool that many applications use. Many of us are aware of the dangers of dynamic SQL, particularly SQL injection and plan cache bloat. Dynamic SQL is also inherently harder to troubleshoot than native SQL for functional and performance problems.

In this session, we will discuss how to use dynamic SQL effectively and correctly to avoid these and other dangers. We will discuss parameterized dynamic SQL, input validation and sanitation, and how to write your code so that it does not hinder troubleshooting. We will discuss suggestions that those who support application code can pass on to their development teams to incorporate into existing code.

Attendees will leave with the confidence and knowledge they need to develop and support application code that uses dynamic SQL effectively."