该死的SQL拼接

DECLARE @name NVARCHAR(100);
SET @name='张'
SELECT TOP 10 * FROM dbo.Orders WHERE OrderType=22
AND (@name IS NULL OR Consignee LIKE '%'+@name+'%')

SELECT * FROM Student
WHERE (@ID = -1 OR StuID = @ID)
AND (@Sex IS NULL OR StuSex = @Sex)
AND (@Name IS NULL OR StuName LIKE '%' + @Name + '%')


参考：
http://blog.csdn.net/wacthamu/article/details/8674038
https://zhidao.baidu.com/question/489642497866125812.html
http://www.cnblogs.com/yucaiyun/p/7101723.html
http://www.cnblogs.com/yunfeifei/p/4079577.html