Using QUOTENAME() to Protect Against SQLInjection

(Dinesh Asanka) QUOTENAME is function which has been available since SQL Server 2005. This function returns a Unicode string with the delimiters added to make the input string a valid SQL Server delimited identifier, such as in the below example

Read More - Register for Free Membership