Report question

Question: Are Parameters really enough to prevent Sql injections?