Hi I am using a dataset and in that dataset I have a table adapter. In my table adapters I have used stored procedures as queries. If I use the following lines to insert form
Update 1: Even if you didn't use stored procedure and defined queries with parameters on the adapter, it would be safe against sql injection i.e. select f1, f2 where f3 = @myparameter ... that would use a prepared query.