title: Why is SQL statement not working?
body: <p>I need to make this insert statement resilient to SQL injection. </p>
  
  <p>I used params as per examples I researched but I get this error:"name Description does not exist in current context" in the following line of code: " sqlCommand.Parameters.AddWithValue("@Description", newDescription.Description);"
  How can I fix this? </p>
  
  <p>I also included a "test" string to prove that is resilient to the attack,passing the string and then checking in SQL Server that the database is safe. Is this the best way to test it?</p>
  
  <pre><code>Edit: Thanks to @Tibrogargan, who solved this issue. 
  </code></pre>