SQL存储过程里Like参数化

 

alter   PROCEDURE UP_UserInfo_GetList
@ClientID int,
@Status INT,
@Email VARCHAR(100)

 AS 
declare   @sqlstr   char(500) 

  set   @sqlstr= 'SELECT * FROM UserInfo WHERE  Status='+CAST(@Status AS varchar)+' and ClientID='+CAST(@ClientID AS varchar)+' AND Email LIKE  ''%' + @Email + '%'' Order by ModifyTime DESC '

  exec   (@sqlstr)

GO