Comcast interview question

How would you guard against sql injection?