[转贴]How do I find a stored procedure containing ?

http://databases.aspfaq.com/database/how-do-i-find-a-stored-procedure-containing-text.html

I see this question at least once a week. Usually, people are trying to find all the stored procedures that reference a specific object. While I think that the best place to do this kind of searching is through your source control tool (you do keep your database objects in source control, don't you?), there are certainly some ways to do this in the database. 
 
Let's say you are searching for 'foobar' in all your stored procedures. You can do this using the INFORMATION_SCHEMA.ROUTINES view, or syscomments: 
 

SELECT  ROUTINE_NAME, ROUTINE_DEFINITION 
              FROM  INFORMATION_SCHEMA.ROUTINES 
               WHERE  ROUTINE_DEFINITION  LIKE   ' %foobar% '  
              AND  ROUTINE_TYPE = ' PROCEDURE '

 
If you want to present these results in ASP, you can use the following code, which also highlights the searched string in the body (the hW function is based on Article #2344): 
 

<% ...  
    set conn = CreateObject("ADODB.Connection") 
    conn.Open = "<connection string>" 
 
    ' String we're looking for: 
    str = "foobar" 
 
    sql = "SELECT ROUTINE_NAME, ROUTINE_DEFINITION " & _ 
        "FROM INFORMATION_SCHEMA.ROUTINES " & _ 
        "WHERE ROUTINE_DEFINITION LIKE '%" & str & "%' " & _ 
        " AND ROUTINE_TYPE='PROCEDURE'" 
 
    set rs = conn.execute(sql) 
    if not rs.eof then 
        do while not rs.eof 
            s = hW(str, server.htmlEncode(rs(1))) 
            s = replace(s, vbTab, "&nbsp;&nbsp;&nbsp;&nbsp;") 
            s = replace(s, vbCrLf, "<br>") 
            response.write "<b>" & rs(0) & "</b><p>" & s & "<hr>" 
            rs.movenext 
        loop 
    else 
        response.write "No procedures found." 
    end if 
 
    function hW(strR, tStr) 
        w = len(strR)  
        do while instr(lcase(tStr), lcase(strR)) > 0  
            cPos = instr(lcase(tStr), lcase(strR))  
            nStr = nStr & _  
                left(tStr, cPos - 1) & _  
                "<b>" & mid(tStr, cPos, w) & "</b>"  
            tStr = right(tStr, len(tStr) - cPos - w + 1)  
        loop  
        hW = nStr & tStr  
    end function 
 
    rs.close: set rs = nothing 
    conn.close: set conn = nothing 
%>

 
Another way to perform a search is through the system table syscomments: 
 

SELECT   OBJECT_NAME (id) 
     FROM  syscomments 
     WHERE   [ text ]   LIKE   ' %foobar% '  
     AND   OBJECTPROPERTY (id,  ' IsProcedure ' )  =   1  
     GROUP   BY   OBJECT_NAME (id)

 
Now, why did I use GROUP BY? Well, there is a curious distribution of the procedure text in system tables if the procedure is greater than 8KB. So, the above makes sure that any procedure name is only returned once, even if multiple rows in or syscomments draw a match. But, that begs the question, what happens when the text you are looking for crosses the boundary between rows? Here is a method to create a simple stored procedure that will do this, by placing the search term (in this case, 'foobar') at around character 7997 in the procedure. This will force the procedure to span more than one row in syscomments, and will break the word 'foobar' up across rows. 
 
Run the following query in Query Analyzer, with results to text (CTRL+T): 
 

SET  NOCOUNT  ON  
SELECT   ' SELECT  ''' + REPLICATE ( ' x ' ,  7936 ) + ' foobar '  
SELECT   REPLICATE ( ' x ' ,  500 ) + ''''

 
This will yield two results. Copy them and inject them here: 
 

CREATE   PROCEDURE  dbo.x 
AS  
BEGIN  
     SET  NOCOUNT  ON  
     <<  put both results  on  this line  >>  
END  
GO

 
Now, try and find this stored procedure in INFORMATION_SCHEMA.ROUTINES or syscomments using the same search filter as above. The former will be useless, since only the first 8000 characters are stored here. The latter will be a little more useful, but initially, will return 0 results because the word 'foobar' is broken up across rows, and does not appear in a way that LIKE can easily find it. So, we will have to take a slightly more aggressive approach to make sure we find this procedure. Your need to do this, by the way, will depend partly on your desire for thoroughness, but more so on the ratio of stored procedures you have that are greater than 8KB. In all the systems that I manage, I don't have more than a handful that approach this size, so this isn't something I reach for very often. Maybe for you it will be more useful. 
 
First off, to demonstrate a little better (e.g. by having more than one procedure that exceeds 8KB), let's create a second procedure just like above. Let's call it dbo.y, but this time remove the word 'foobar' from the middle of the SELECT line. 
 

CREATE   PROCEDURE  dbo.y 
AS  
BEGIN  
     SET  NOCOUNT  ON  
     <<  put both results  on  this line, but  replace   ' foobar '   with  something  else   >>  
END  
GO

 
Basically, what we're going to do next is loop through a cursor, for all procedures that exceed 8KB. We can get this list as follows: 
 

SELECT   OBJECT_NAME (id) 
     FROM  syscomments 
     WHERE   OBJECTPROPERTY (id,  ' IsProcedure ' )  =   1  
     GROUP   BY   OBJECT_NAME (id) 
     HAVING   COUNT ( * )  >   1

 
We'll need to create a work table to hold the results as we loop through the procedure, and we'll need to use UPDATETEXT to append each row with the new 8000-or-less chunk of the stored procedure code. 
 

--  create temp table 
CREATE   TABLE  # temp  
( 
    Proc_id  INT , 
    Proc_Name SYSNAME, 
    Definition  NTEXT  
) 
 
--  get the names of the procedures that meet our criteria 
INSERT  # temp (Proc_id, Proc_Name) 
     SELECT  id,  OBJECT_NAME (id) 
         FROM  syscomments 
         WHERE   OBJECTPROPERTY (id,  ' IsProcedure ' )  =   1  
         GROUP   BY  id,  OBJECT_NAME (id) 
         HAVING   COUNT ( * )  >   1  
 
--  initialize the NTEXT column so there is a pointer 
UPDATE  # temp   SET  Definition  =   ''  
 
--  declare local variables 
DECLARE   
     @txtPval   binary ( 16 ),  
     @txtPidx   INT ,  
     @curName  SYSNAME, 
     @curtext   NVARCHAR ( 4000 ) 
 
--  set up a cursor, we need to be sure this is in the correct order 
--  from syscomments (which orders the 8KB chunks by colid) 
 
DECLARE  c  CURSOR  
    LOCAL FORWARD_ONLY STATIC READ_ONLY  FOR  
     SELECT   OBJECT_NAME (id),  text  
         FROM  syscomments s 
         INNER   JOIN  # temp  t 
         ON  s.id  =  t.Proc_id 
         ORDER   BY  id, colid 
OPEN  c 
FETCH   NEXT   FROM  c  INTO   @curName ,  @curtext  
 
--  start the loop 
WHILE  ( @@FETCH_STATUS   =   0 ) 
BEGIN  
 
     --  get the pointer for the current procedure name / colid 
     SELECT   @txtPval   =   TEXTPTR (Definition) 
         FROM  # temp  
         WHERE  Proc_Name  =   @curName  
 
     --  find out where to append the #temp table's value 
     SELECT   @txtPidx   =   DATALENGTH (Definition) / 2  
         FROM  # temp  
         WHERE  Proc_Name  =   @curName  
 
     --  apply the append of the current 8KB chunk 
     UPDATETEXT  # temp .definition  @txtPval   @txtPidx   0   @curtext  
 
     FETCH   NEXT   FROM  c  INTO   @curName ,  @curtext  
END  
 
--  check what was produced 
SELECT  Proc_Name, Definition,  DATALENGTH (Definition) / 2  
     FROM  # temp  
 
--  check our filter 
SELECT  Proc_Name, Definition 
     FROM  # temp  
     WHERE  definition  LIKE   ' %foobar% '  
 
--  clean up 
DROP   TABLE  # temp  
CLOSE  c 
DEALLOCATE  c

 
Adam Machanic had a slightly different approach to the issue of multiple rows in syscomments, though it doesn't solve the problem where a line exceeds 4000 characters *and* your search phrase teeters on the end of such a line. Anyway, it's an interesting function, check it out! 
 

---

SQL Server 2005 
 
Luckily, SQL Server 2005 will get us out of this problem. There are new functions like OBJECT_DEFINITION, which returns the whole text of the procedure. Also, there is a new catalog view, sys.sql_modules, which also holds the entire text, and INFORMATION_SCHEMA.ROUTINES has been updated so that the ROUTINE_DEFINITION column also contains the full text of the procedure. So, any of the following queries will work to perform this search in SQL Server 2005: 
 

SELECT  Name 
     FROM  sys.procedures 
     WHERE  OBJECT_DEFINITION( object_id )  LIKE   ' %foobar% '  
 
SELECT   OBJECT_NAME ( object_id ) 
     FROM  sys.sql_modules 
     WHERE  Definition  LIKE   ' %foobar% '  
     AND   OBJECTPROPERTY ( object_id ,  ' IsProcedure ' )  =   1  
 
SELECT  ROUTINE_NAME 
     FROM  INFORMATION_SCHEMA.ROUTINES 
     WHERE  ROUTINE_DEFINITION  LIKE   ' %foobar% '  
     AND  ROUTINE_TYPE  =   ' PROCEDURE '

 

---

 
Note that there is no good substitute for documentation around your application. The searching above can provide many irrelevant results if you search for a word that happens to only be included in comments in some procedures, that is part of a larger word that you use, or that should be ignored due to frequency (e.g. SELECT). It can also leave things out if, for example, you are searching for the table name 'Foo_Has_A_Really_Long_Name' and some wise developer has done this: 
 

EXEC ( ' SELECT * FROM Foo_Has '   + ' _A_Really_Long_Name ' )

 
Likewise, sp_depends will leave out any procedure like the above, in addition to any procedure that was created before the dependent objects exist. The latter scenario is allowed due to deferred name resolution—the parser allows you to create a procedure that references invalid objects, and doesn't check that they exist until you actually run the stored procedure.  
 
So, long story short, you can't be 100% certain that any kind of searching or in-built query is going to be the silver bullet that tracks down every reference to an object. But you can get pretty close. 
 

---

Third-party products 
 
Whenever there is a void, someone is going to come up with a solution, right? I was alerted recently of this tool, which indexes all of your metadata to help you search for words... 
 
    Gplex Database 
 
That's the only one I know of that actually indexes the content and metadata of database objects (there are tons of tools that can perform brute force search of files if you have scripted out your objects, but this will roughly equate to the above). If you know of other products, please let us know.