Firmstep interview question

How do you prevent SQL Injections?