Skip to content
Free public beta until December 4, 2026: every course is open, no card needed. After that, the first chapter of each course stays free and full access is a one-time $39 ($19 for up to 100 founding members chosen for helpful feedback). Your progress is kept. How the beta works

parameterized query

A query where values are sent separately from the SQL, never pasted into it.

A parameterized query passes values as typed parameters (@name) rather than as text; EF Core's FromSql interpolation and Dapper both parameterize.

Examples

  • db.Orders.FromSql($"SELECT * FROM Orders WHERE City = {city}") sends city as a parameter, never as part of the SQL text.

See also

SQL injection SQL
Read the full section →