"There are several ways you can prevent an SQL injection attack. One way is closely defining the parameters for queries. This identifies nonstandard queries, allowing systems administrators to block them. A similar one uses prepared statements for queries and defines the SQL code they use. Another way to prevent SQL injection attacks is using stored procedures, in which a database administrator calls a procedure when they need it. The final methodology I prefer is known as lists input validation. This blocks any input which has not been stored on what is known as a white input list."