Using database stored procedures to retrieve or store data and passing any value that comes from the client process (user entered or not) via a parameter to tho

Using database stored procedures to retrieve or store data and passing any value that comes from the client process (user entered or not) via a parameter to those stored procedures (rather than constructing an SQL statement from strings) will deal with the problem in every database I have worked with (assuming stored procedures and variable parameters). Justification? That's just how you guard against SQL injection attacks.