if u have too many params and u want to bulid a sql statment according to the data in it u can try sp_sqlexcute or exec()

by using this u can exec string and get output .