Preventing an SQL injection attack

  What steps would you take to prevent an SQL injection attack? What are advantages and disadvantages of dynamic SQL statements? What types of databases are more vulnerable to SQL injections?