Sau folositi sql dinamic si aveti grija la sql injection:
DECLARE @InVariable varchar(1024);
DECLARE @SQLString nvarchar(500);
DECLARE @ParmDefinition nvarchar(500);
SET @ParmDefinition = N'@tipuri varchar(1024)';
SET @SQLString =N'select * from tabel where tip IN (@tipuri)';
SET @tipuri='1,2,3';
EXECUTE sp_executesql @SQLString, @ParmDefinition,
@tipuri= @InVariable;
Cristian Andrei Lefter, SQL Server MVP
MCT, MCSA, MCDBA, MCAD, MCSD .NET,
MCTS, MCITP - Database Administrator SQL Server 2005
http://sqlserver.ro