Sau folositi sql dinamic si aveti grija la sql injection:

DECLARE @InVariable varchar(1024);
DECLARE @SQLString nvarchar(500);

DECLARE @ParmDefinition nvarchar(500);

SET @ParmDefinition = N'@tipuri varchar(1024)';

SET @SQLString =N'select * from tabel where tip IN (@tipuri)';

SET @tipuri='1,2,3';

EXECUTE sp_executesql @SQLString, @ParmDefinition,
                      @tipuri= @InVariable;

---

Cristian Andrei Lefter, SQL Server MVP
MCT, MCSA, MCDBA, MCAD, MCSD .NET,
MCTS, MCITP - Database Administrator SQL Server 2005
http://sqlserver.ro