title: prevent sql injection
body: <p>Is there  a way to prevent sql injection by using stored procedures?</p>
  
  <p>I have a sql query as </p>
  
  <pre><code>select column name from table where field ='@value'
  cmd.parameters.add('@value', value);
  </code></pre>
  
  <p>I am using parameterized queries with least privileges. How can i write a basic stored procedure to prevent an sql injection.  Is that possible?</p>