Question: How can I avoid SQL injection attacks in my ASP.NET application?