Sorting And Stored Procedure Quotes

Normally when I do a sort for a stored procedure I use something like this:





ORDER BY


CASE WHEN @SortOrder = 'FirstName' THEN FirstName


WHEN @SortOrder = 'LastName' THEN LastName


WHEN @SortOrder = 'Extension' THEN Extension


ELSE LastName








How do I get that into a dynamic SQL statement with proper quotes?


Most of the SQL left out for cleanliness. The order by below would be the ELSE condition.





CREATE PROCEDURE view_by_company


@entrytype nvarchar(50),@strYears nvarchar(20), @company nvarchar(20)


AS


Declare @SQL nVarchar(4000)


Select @SQL = 'SELECT Media_Tracking_Companies.COMPANY '


Select @SQL = @SQL + 'WHERE (LTRIM(STR(DATEPART(yyyy, dbo.Media_Tracking_Ad_History.ADDATE))) IN ('


Select @SQL = @SQL + @strYears + '))'


Select @SQL = @SQL + 'ORDER BY dbo.Media_Tracking_Ad_History.PUBLICATION, dbo.Media_Tracking_Publications.AdDate DESC '


exec (@sql)


GO