MySql存储过程带参数处理方式_MySQL

/********动态查询用户的信息********/ 
CREATE PROCEDURE GetUsersDynamic(WhereCondition varchar(500),OrderByExpress varchar(100)) 
begin 
declare stmt varchar(2000); 
if LENGTH(OrderbyExpress)>0 then 
begin 
 set @sqlstr=concat('select id,name,password,age,getdate(adddate) as AddDate from users where ',WhereCondition,' order by ',OrderByExpress); 
end; 
else 
begin 
 set @sqlstr=concat('select id,name,password,age,getdate(adddate) as AddDate from users where ',WhereCondition); 
end; 
end if; 
prepare stmt from @sqlstr; 
execute stmt; 
end; 

CREATE DEFINER=`root`@`localhost` FUNCTION `getdate`($date datetime) RETURNS varchar(50) CHARSET latin1 
return date_format($date,'%Y-%m-%d'); 

CREATE DEFINER=`root`@`localhost` PROCEDURE `InsertUser`(in name2 varchar(50),in password2 varchar(32),in age2 int,in adddate2 datetime) 
begin 
DECLARE stmt varchar(2000); 
set @sqlstr=concat('insert into users(name,password,age,adddate) values('); 
set @sqlstr=concat(@sqlstr,'''',name2,'''',',','''',password2,'''',',',age2,',','''',adddate2,'''',')'); 
prepare stmt from @sqlstr; 
execute stmt; 
end;