SQL intercepts comma-delimited string instances

//sql comma-delimited string parameter intercept operation
1 CREATE proc Proc_update_userrole2(@IDs nvarchar ( -), @RoleIDint)3  as4DECLARE @llocaint5DECLARE @rlocaint6DECLARE @IDint7  Set@lloca =18  Set@rloca =charindex (',', @IDs, @lloca)9   while(@rloca isNotNULLand @rloca <>0)Ten begin One  Set@ID = substring (@IDs, @lloca, @rloca-@lloca) A  Set@[email protected]+1 -  Set@rloca =charindex (',', @IDs, @lloca) -Update Sys_userrolesSet[Email protected]whereR_roleidinch(SelectRoleid fromEgb_orguserwhere[Email protected]) and R_useridinch(SelectUserid fromEgb_orguserwhereAutoid=@ID) theUpdate Egb_orguserSet[Email protected]whereAutoid=@ID - End -Go

SQL intercepts comma-delimited string instances