Why do we always prefer using parameters in SQL statements? Why do we always prefer using parameters in SQL statements? sql-server sql-server