Give me parameterized SQL, or give me death

An old post by Jeff Atwood – but a timeless one that every developer should read over and over again until it becomes second nature.

http://www.codinghorror.com/blog/2005/04/give-me-parameterized-sql-or-give-me-death.html

Also read the sister post “Who needs stored procs, Anyways”