05/03/2010 As much as making your T-SQL work smarter for you, a la dynamic SQL, is helpful, it can also introduce a significant about of risk. I'm speaking specifically about SQL injection attacks.

18/08/2012 As you can see, SQL Server 2012 introduces many new and interesting improvements. Many of these functions will be easy to understand for .NET developers since they're borrowed from the .NET ...

T-SQL isn't particularly well suited to advanced string manipulation. I have found that small CLR functions that perform string manipulation and substring extraction perform very well in SQL Server.