Stored procedures work better for a numbre of reasons. 1. It forces the developer to parameterize the query to better defend against SQL injection attacks. 2. There is better performance because stored procedures take advantage of caching 3. Stored procedures perform better because instead of sending over the whole sql query, the system just has to send over the stored procedure name and the parameters.