[CheckId] CA2100 [Warning] CA2100: Review SQL queries for security vulnerabilities [Description] 
A method sets the System.Data.IDbCommand.CommandText property by using a string that is built from a string argument to the method. This rule assumes that the string argument contains user input. A SQL command string that is built from user input is vulnerable to SQL injection attacks.