3 ms·

Stored procedures offer no inherent protection.

• flukus 10y ago
  Often they will make the problem worse if you're doing string concatenation to create dynamic queries in a stored proc.