# Getting started with query parameterization

DevFeed: [Getting started with query parameterization](<https://devfeed.tech/articles/getting-started-with-query-parameterization-7940.md>)

Original publisher: [Read original article](<https://snyk.io/blog/getting-started-query-parameterization/>)

Author: Mary Gathoni

Published: 2023-10-24T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [SQL](<https://devfeed.tech/topics/sql.md>), [Security](<https://devfeed.tech/topics/security.md>), [Databases](<https://devfeed.tech/topics/databases.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [acquisition](<https://devfeed.tech/tags/acquisition.md>), [article](<https://devfeed.tech/tags/article.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code](<https://devfeed.tech/tags/code.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [contentlab](<https://devfeed.tech/tags/contentlab.md>), [developer](<https://devfeed.tech/tags/developer.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [sql](<https://devfeed.tech/tags/sql.md>)

## AI overview

A hands-on article explaining SQL query parameterization as a defense against SQL injection in web applications. It describes using placeholders, prepared statements, and parameterized stored procedures so user input is treated as data rather than executable SQL, while also discussing permissions and potential performance benefits.

## Source excerpt

In this hands-on article, we'll review how to leverage SQL query parameterization and stored procedures to prevent injection attacks, as well as some additional security measures that help keep our code safe.