edit T-Sql Script for get all provinces.
Sql Injection prevention in Model.