---
title: "What is sql injection."  
description: "What is sql injection."  
author: "Anonymous User"  
published: 2011-05-21  
updated: 2011-10-07  
canonical: https://www.mindstick.com/forum/257/what-is-sql-injection  
category: "c#"  
tags: ["c#"]  
reading_time: 1 minute  

---

# What is sql injection.

Hi....

I can you [please tell me](https://www.mindstick.com/forum/33900/please-tell-me-what-are-the-technique-to-content-optimization) that what is sql injection and what is [basic](https://www.mindstick.com/forum/161830/what-are-the-security-risks-of-using-basic-authentication) steps to [prevent sql injection](https://www.mindstick.com/forum/776/are-pdo-prepared-statements-sufficient-to-prevent-sql-injection) in my program. Please provide me some usful [link](https://www.mindstick.com/articles/23633/link-builder) and [resources](https://yourviews.mindstick.com/view/293/renovation-causes-wastage-of-resources) to study it.

Thanks in advance.

## Replies

### Reply by Anonymous User

Thanks everyone for this information....\

### Reply by Anurag Chaurasia

Hello Sir,\
using stored procedure is the good solution for securing the application by [sql injection](https://www.mindstick.com/blog/227/sql-injection).....Validate all input coming from the user on the serverAvoid the use of dynamic SQL queries if there an alternate method is availableUse parameterized stored procedure with embedded parameters

### Reply by Uttam Misra

Here you go:\
[http://msdn.microsoft.com/en-us/library/ff648339.aspx](http://msdn.microsoft.com/en-us/library/ff648339.aspx)


---

Original Source: https://www.mindstick.com/forum/257/what-is-sql-injection

Copyright © MindStick Software Pvt. Ltd. This Markdown version is provided for developers, AI systems, and offline reading.