建議您在執行字符串時，使用sp_executesql存儲過程而不要使用 EXECUTE 語句。由于此存儲過程支持參數替換，因此sp_executesql比 EXECUTE 的功能更多；由于 SQL Server 更可能重用sp_executesql生成的執行計劃，因此sp_executesql比 EXECUTE 更有效

下面是一個例子

CREATE PROCEDURE [dbo].[P_PCT_SP_EXECUTESQL]    -- Add the parameters for the stored procedure here    @EmployeeName nvarchar(50),    @CreateUser nvarchar(50),    @SortField nvarchar(50),    @SortDir nvarchar(50)ASBEGIN    -- SET NOCOUNT ON added to prevent extra result sets from    -- interfering with SELECT statements.    SET NOCOUNT ON;    -- Insert statements for procedure here    declare @sql nvarchar(1000)    set @sql = 'select * from employee where EmployeeName = @EmployeeName and CreateUser = @CreateUser order by ' + @SortField + ' ' + @SortDir    exec sp_executesql     @sql,     N'@EmployeeName nvarchar(50),@CreateUser nvarchar(50),@SortField nvarchar(50),@SortDir nvarchar(50)',    @EmployeeName,@CreateUser,@SortField,@SortDirENDGO