Preventing an SQL injection attack

What steps would you take to prevent an SQL injection attack?
What are advantages and disadvantages of dynamic SQL statements?
What types of databases are more vulnerable to SQL injections?

Sample Solution