title: Is this LINQ statment vulnerable to SQL injection?
body: <p>Is this LINQ statment vulnerable to SQL injection?</p>
  
  <pre><code>var result = from b in context.tests
      where b.id == inputTextBox.Text
      select b;
  </code></pre>
  
  <p>where context is an Entity and tests is a table.
  I'm trying to learn LINQ and I thought that the benefit of it was that it wasn't vulnerable to sql injection, but some stuff I've see has said differently. Would I need to parametrize this LINQ statement to make it safer? If so, How?</p>
  
  <p>Also would this be considered linq to sql or linq to entities?</p>