This SP can give you tow things

1. Infrastructure for SP that handle with SQL injection when your query is Dynamic SQL
2. Infrastructure for SP that gets one or more values and brings back results from your query.

0.1.0

SQL server

https://docs.microsoft.com/en-us/sql/relational-databases/security/sql-injection?view=sql-server-2017

• SQLServer

Run the SQL script on your query window