Untitled

How to write the select statement in this condition?

SELECT * FROM Resources

              WHERE ResourceName  ='" + ResourceName + "'

              AND  Status = '" + status + "' "

       

ResourceID|ResourceName|Status

       

Select * From Resources Where (ResourceName = '"+ ResourceName + "' OR ResourceName IS NULL) AND (Status = '" + Status +"' OR Status IS NULL)

       

'; Drop Table Resources; --

       

SELECT * FROM Resources

WHERE (ResourceName  = CASE WHEN '" + ResourceName + "' IS NULL THEN ResourceName  ELSE '" + ResourceName + "' END) //do same for other parameter