When using something like LINQ or Entity, I assume that SQL injection is a &quot;solved&quot; problem. As long as you aren&#x27;t doing something crazy like writing stored procedures which internally concat user strings with query language, it&#x27;s a whole class of attacks which you know will not succeed. Has anyone ever proven this wrong?<p>And then there&#x27;s the VTech&#x27;s of the world.... sheesh!