SQL Injection Attacks in ASP.NET

SQL injection attacks are often accomplished with the ' single quote or -- double dash as a comment.

Use parameterized queries as placeholders for the values in your SQL statements.