Is it safe to not parameterize an SQL query when the parameter is not a string? Is it safe to not parameterize an SQL query when the parameter is not a string? sql sql