https://www.svenbit.com/tags/c%23/ Recent content in C# on svenbit Hugo -- 0.136.5 en-us Fri, 08 Aug 2014 15:18:00 +0800 https://www.svenbit.com/2014/08/using-sqlparameter-with-sqls-in-clause-in-csharp/ Fri, 08 Aug 2014 15:18:00 +0800 https://www.svenbit.com/2014/08/using-sqlparameter-with-sqls-in-clause-in-csharp/ <p>Using SqlParameter in SqlCommand is a great way to pass variable into SQL statement and prevent SQL Injection, it is rather simple to implement as well, basically all you  need to do is to declare the parameter name in your SQL statement or stored procedure and make sure that you add the parameter with the specified parameter name into the SQL command parameters. Here&rsquo;s an example of basic implementation of SqlParameter:</p>