Open
Description
Queries that have user input should be executed with parametrized queries and should possibly use sp_executesql
{{ message }}
No one assigned
No type
No projects
None yet
No branches or pull requests
Queries that have user input should be executed with parametrized queries and should possibly use sp_executesql