SQL Injection Prevention

Check out these resources from Buck Woody (SQL Server Program Manager):

http://blogs.msdn.com/buckwoody/archive/2008/06/25/stopping-sql-injection-in-it-s-tracks.aspx

Here's another good resource I came across:

http://msdn.microsoft.com/en-us/magazine/cc163917.aspx