prevent execution of piggy backed variables

[gcole]

I have a variable sent from an asp page as follows:

set @test = 'OConnor';select * from dbo.TableName

The SP only recognizes the 'OConnor' piece. How can I prevent the select code from executing? Can this be done at the DB level?

 

[hneal98]

is that whole satement sent from the asp page?

 

[gcole]

Yes it is. It looks to me like it has to be handled at the page level.

 

[hneal98]

Yes, I think that would be much easier to deal with. if you could change the string that is passed back.