CREATE PROCEDURE VerifyUser
    @username varchar(50),
    @password varchar(50)
AS
BEGIN
    DECLARE @sql nvarchar(500);
    SET @sql = 'SELECT * FROM UserTable
                WHERE (UserName = ''' + @username + ''')
                AND (Password = ''' + @password + ''' ');
    EXEC(@sql);
END
GO