What if the app needs to support UNICODE?<BR><BR>Concatenating strings to make SQL statements invariably leads to hacks trying to make sure the data won't break your SQL.

Squash the dangers lurking in your SQL queries by setting parameters by way of parameterized queries.