SQL parameter
An SQL parameter is a typed value supplied separately from an SQL statement and associated with a named placeholder in that statement.
Building Web APIs with ASP.NET Core
An SQL parameter is a typed placeholder whose value is supplied separately from an SQL statement's command text.
- How it is used
- Uses typed placeholders to keep dynamic values separate from SQL commands and reduce injection risk.
- How deep it goes
- Defines parameters and demonstrates declaration and assignment, but leaves database-provider internals to the execution system.
- Examples
- Shows an UPDATE statement that assigns a user note through a typed @notes parameter.
- What you can do after
- Apply parameters through provider APIs or let EF Core generate safer SQL from data-access code.
Read how Building Web APIs with ASP.NET Core explains SQL parameter →
Practical Automation with PowerShell: Effective scripting from the console to the cloud
An SQL parameter is a separately supplied value associated with a named placeholder in a SQL statement.
- How it is used
- Filters SQL queries dynamically while keeping values separate from query structure.
- How deep it goes
- Explains placeholders, hashtable binding, type conversion, escaping, query plans, and injection prevention.
- Examples
- Uses a server-name lookup and contrasts parameter binding with interpolated SQL that can execute injected commands.
- What you can do after
- Apply parameters via Invoke-DbaQuery to build safer dynamic SQL filters.
Related concepts
- injection attackaddresses · An injection attack is a security attack in which crafted or untrusted input is interpreted as commands, code, or query structure by a target system.
- SQL injectionaddresses · SQL injection is an attack in which crafted, untrusted input alters the structure or meaning of a SQL statement, potentially causing unintended database operations.
- hashtableused by · A hashtable is a key-value collection that associates unique keys with values.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.