6 ms·At the same time, I think it's just a really quick/lazy way to prevent SQL injection.by Scriptor 17y agoAt the same time, I think it's just a really quick/lazy way to prevent SQL injection.akirk 17y agowell you have already lost if you try to insert the password into the database without applying a salted hash function on it.TeHCrAzY 17y agoDon't most "web" languages support parameters in the same was .NET does (at least with Sql Server)?