Mid ADO.NET Using parameterized queries: This ensures user input is treated as data, not? executable code.