SQL - stored procedure, pass field and table name parameters on execute

Question

I created a SQL procedure that replaces all values in a field with Xs the same length as the original values.

Update  Table
Set     Name = Replicate('x', Len(Name))

I am trying to alter this procedure so that I can just pass a table and field name as a parameter on execute instead of editing the stored procedure every time I want to pass a new field. Is there a way to do this?

This is what I think the execute statements should look like when I want to x out the values in another field:

Exec MyProcedure ‘Users’, ‘Email’

Answer 1

You can use EXEC to execute sql statements like this: EXEC (@sqlCommand). SqlCommand would be the string composed by you based on the received parameters.

Also, another option would be to run the statement using sp_executesql.