Using SqlCommand parameters

Using SqlCommand parameters
Also, not letting the service throw an exception if the request was bad
If there was an exception in parsing, it returns a BadRequest
Same is true if the request is not a POST