title: Dynamic build query & SQL Injection & DLLs files
body: <p>I have read a lot of things about SQL injection and many arguments why you should avoid to build your query dynamically using plain code/concatenations within your cs.file</p>
  
  <p>However, I have question and I need some advice from someone with more experience than me.</p>
  
  <p>I created some DLL files in order to re-use my code in different projects and for that reason I was thinking generic.</p>
  
  <p>I created these DLL files that contained all the logic/code of building SQL queries in a dynamic way + concatenation of statement. Thereafter, I add these DLL files as reference to my project.</p>
  
  <p>This will be vulnerable to SQL Injection ? also is that insufficient procedure (time consuming/insufficient maintenance)?</p>
  
  <p>Any advice would be appreciated. </p>