title: Can I get SQL injection attack from SELECT statement?
body: <p><strong>2 Questions actually:</strong></p>
  
  <p>I know i must use Stored Procedures as much as Possible, but i would like to know the following please.</p>
  
  <p><strong>A:</strong> Can i get a SQL Injection attack from a SELECT statement such as (Select * from MyTable) ?</p>
  
  <p><strong>B:</strong>
  Also, can i get a SQL Injection attack when I use the SQLDataSource in ASP.NET?</p>