Re:How difficult is it. (Score 1)

Thats exactly the problem we had at a company I contracted for. I did manage to write one sp with about 15 parameters but it was a royal pain as you had to put together the SQL dynamically anyway. For cases where it is manageable I put together the dynamic string and used sp_executesql instead of exec. I prefer to use stored procedures where possible, but found in some places, like the huge parameterized queries its easier (and sometimes faster performance wise) to just put together the SQL like you said above.