As a good rule of thumb when exeuting application SQL code you should always try and use stored proc's. Three good reasons
1. This is precompiled and has its execution plan all set to rock and roll for the work that you want to do.
2. You don't have to arse about with loads of dynamic SQL with your application code which can be a pain to debug
3. If using sp's then the code in modular form , that is to say that if you need to change the code , all you have to is change the proc. This has the advantage of not having to change code all over you application if you are using the logic more than once.