I was looking thru the NHibernate sources and i noticed you are using queries + IDataParameters instead of plain text queries. What are the advantages of using IDataParameters over plain queries ?


Thanks.

It is mainly for security reasons...

Read:
SQL Injection Attacks and Some Tips on How to Prevent Them

You also have the advantage of the ado.net provider escaping invalid characters and the like "like quotation marks in strings. Then on some databases (like MSSQL) you can get the advantages of preparing those statements and getting performance gains. It's always a good idea to use parameters whenever possible.