Hi,
I want to develop a query manager that filters non-parameteriezed queries. for example queries like this:
"select * from XYZ where username = '" + userName + "' and password = '" + password + "'";

Is there an automatic way for this issue? Does Query object contain any information which may be helpful in this manner?

Any help would be appreciated.
Thanks in advance

Hamed