Injection Proof SQL
I guess I'm wondering why anyone is still writing SQL in C# anymore. If you use stored procs, that should be SQL injection proof and if you're using LINQ, that's also injection proof.
If you haven't tried LINQ, I'd highly suggest that you give it a shot.