Do you have opportunities to convert use Linq to entities?

Look for inline SQL to see whether you can replace it with Linq to Entities.

Figure: SQL Injection for Speed Cameras :-)