Hi Sudipta,
You can write sql query as below and I have attached the source code also
-- ProcedureQueryOutput 'Suraj Kumar Mandal', ''
ALTER PROCEDURE [dbo].[ProcedureQueryOutput]
(
@EmpName VARCHAR(50),
@SQLQuery NVarchar(2000) out
)
AS
IF EXISTS ( SELECT * FROM EmpTable WHERE EmpName = @EmpName )
BEGIN
SET @SQLQuery = ('SELECT * FROM EmpTable WHERE EmpName =''' + @EmpName +'''')
END
ELSE
BEGIN
SET @SQLQuery = 'INSERT INTO EmpTable (EmpName) VALUES ( '''+ @EmpName +''' )'
END
EXECUTE sp_executesql @SQLQuery
And after that you can call in web form as below
protected void btnGetSQLText_Click(object sender, EventArgs e)
{
string message = String.Empty;
SqlConnection con = new SqlConnection("Data Source=.;Initial Catalog=TestDB; User Id=sa; Password=password12");
con.Open();
SqlCommand cmd = new SqlCommand("ProcedureQueryOutput", con);
cmd.CommandType = CommandType.StoredProcedure;
cmd.Parameters.AddWithValue("@EmpName", txtName.Text.Trim().Replace("'","''"));
cmd.Parameters.Add("@SQLQuery", SqlDbType.NVarChar, 500);
cmd.Parameters["@SQLQuery"].Direction = ParameterDirection.Output;
cmd.ExecuteNonQuery();
message = (string)cmd.Parameters["@SQLQuery"].Value;
con.Close();
}