How to avoid SQL Injection Attack?
http://forums.asp.net/t/777624.aspx
https://www.mindstick.com/blog/228/preventing-sql-injection