My idea is to create some generic classes for Insert/Update/Select via a C# (3.5) Winforms app talking with a MySQL database via MySQL .NET Connector 6.2.2.
For exam
I would suggest utilizing IDataParameter objects to parameterize your queries.
if you use MySqlParameter and do not generate plain string queries you are safe.
MySqlParameter