title: Classic ASP SQL Injection
body: <p>I recently inherited a classic asp website with a ton of inline SQL insert statements that are vulnerable to SQL injection attacks.</p>
  
  <p>These insert statements are executed via the ADO command object.</p>
  
  <p>Will setting the ADO Command Object's Prepared property to true ensure that the query is parameterized before execution, thus mitigating the risk of SQL injection?</p>