ASP.NET

set @Where = ''
set @Select ='SELECT KeySkills FROM Jobseeker WHERE 1 = 1 '

if(@KeySkills is not NULL )
begin
<code>set @Where = ' AND KeySkills = @KeySkills '</code>
set @Select = @Select + @Where              /* Resulting in SELECT KeySkills FROM Jobseeker WHERE 1 = 1 AND KeySkills = @KeySkills */

SET @paramlist = '@KeySkills nvarchar(50)'  /* You need to specify all the parameters you use */

<code>EXEC sp_executesql @Select, @paramlist, @Keyskills</code>   /* You need to pass not only the sql statement, but the parameter list and the parameter value itself */

<script><br />
   function popWin(){<br />
        window.open('http://msdn.microsoft.com', '', '');");<br />
   }<br />
   </script>

<?xml version="1.0" encoding="utf-8" ?>
<configuration>   
  <system.web>
    <authorization>
        <allow users="*" />
    </authorization>
 </system.web>
</configuration>