Using Parameterized Query in ASP.NET

One of the cool and useful things ADO.NET supports is the use of parameterized queries. Parameterized queries aren't a new feature, in fact some of you may already use them in traditional ASP programming. For those not familiar with parameterized queries they are queries that have one or more embedded parameters in the SQL statement. This method of embedding parameters into a SQL statement is, in my opinion, more straightforward and less prone to error than the method of dynamically building up a SQL string. In this article we'll look at how to use parameterized queries in ASP.NET.