Well, I was reading about the SQL Injection but i didn´t realize that it can happen in Visual Basic .NET -I’m using 2008- because I just read about it in PHP, my question is: How can I avoid that? because a friend made it some minutes ago and thats a problem with the security of my Desktop Application.
-Thanks-
SQL injection attacks are not language-specific. If you are accepting user input and inserting it directly into your SQL queries without sanitizing it, then your application is vulnerable to SQL injections.
Have a look at this answer for more details on how you can avoid SQL injection attacks.
The general idea you should take away from this is to never trust user input.