How can I avoid SQL injection attacks in my ASP.NET application?

Question

I need to avoid being vulnerable to SQL injection in my ASP.NET application. How might I accomplish this?

Answer 1

Try to use Stored Procedures, and validate the input on your data. Do not use any direct SQL like INSERT INTO ...