SQL Injection and how to avoid it

The safest way to keep yourself safe from SQL Injection is to always use stored procedures to accept input from user-input variables.

Details on source link:
<http://blogs.msdn.com/tom/archive/2008/05/29/sql-injection-and-how-to-avoid-it.aspx>