title: How does SqlCommand sanitize parameters?
body: <p>Using <code>SqlParameters</code> is a recommended method to prevent SQL Injection in your database queries.  Where can I find the code/function that internally sanitizes these parameters?  I'd like to re-use this function in a custom implementation of mine.  I tried to find it using Reflector, but was unsuccessful.</p>