可接受的安全性：使用Paramatised SQL和HTML编码字符串禁用ValidateRequest？

I'm trying to make sure my webforms ASP.NET application is as secure as possible, it receives and stores user input data to a SQL database (the usual stuff) only for users with a login, so not available to the general public.I'm trying to make sure my webforms ASP.NET app