• The best way to avoid SQL Injection is use of Stored Procedures.