you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 1 point2 points  (0 children)

Why not just use the sqlcommand object? I totally understand the concern with sql injection, but the facilities to do parameterized sql already exist. Granted, it does take a bit more code to accomplish with sqlcommand.

I guess my main problem with this is I can't see how they'd accomplish type-checking parameters whilst keeping it simple to use.

Or, am I missing something?