SQL protection parameters are the only proven approach to defend a website from SQL injection attacks. These are custom values that were added to the SQL query during execution. The SQL protection parameters are defined using a @ marker in a SQL statement: