DECLARE @sql NVARCHAR(1000)
DECLARE @filetypeid INT
DECLARE @transactiontypeid INT
DECLARE @des NVARCHAR(50)
SET @filetypeid = 1
SET @transactiontypeid = 1
SET @des = 'CC'
SET @sql = 'select * from FileType where description like ''%'' + @des + ''%'''
EXEC sp_executesql @sql,N'@des NVARCHAR(50)',@des