What is the solution for implementing truly dynamic search queries? Not just a stored procedure with optional parameters, but something even more dynamic than that? Let the end-user choose the exact fields and, more importantly, the operator types to use on them, in order to get the results that they need. And how do you achieve this level of dynamic interactivity without risking SQL injection? This presentation will answer these questions and give you a solution involving some advanced T-SQL martial arts!

More info here:
https://eitanblumin.com/portfolio/advanced-dynamic-search-queries/