The book by Denny Cherry on Securing SQL Server has a chapter on SQL Injection, it might be worth checking it out.
Securing SQL Server, Second Edition: Protecting Your Database from Attackers
Need an answer? No, you need a question
My blog at https://sqlkover.com.
MCSE Business Intelligence - Microsoft Data Platform MVP