Comment by AtNightWeCode

Never use WHERE 1=1. It is both a security risk and a performance risk to run dynamic ad-hoc queries.