string[] param = getHTTPparams(connection);
SqlCommand command = new SqlCommand(@"SELECT AD.document_GUID ,AT.attachment_fileName ,do
                          FROM [legal].[mdm].[View_All_Documents] AD
                          LEFT JOIN [legal].[dbo].[AllAttachments] AT
                          ON AD.document_GUID = AT.document_GUID
                          WHERE AD.legal_GUID = '" + legal_GUID + "'", connection);

SqlCommand command = new SqlCommand(@"DECLARE @order_guid_tr uniqueidentifier
                               SELECT 1 @order_guid_tr = Order_guid
                               FROM [legal].[mdm].[View_All_Documents]
                               WHERE legal_GUID = '" + legal_GUID + "'
                               SELECT AD.document_GUID ,AT.attachment_fileName, document_type
                           FROM [legal].[mdm].[View_All_Documents] AD
                           LEFT JOIN [legal].[dbo].[AllAttachments] AT
                           ON AD.document_GUID = AT.document_GUID
                           WHERE AD.ORDER_GUID = @order_guid_tr", connection);