Parameterized Query Web Parts

Using Parameters in your queries can help make them safer (less likely to be injection attacked), and easier to define logic than in a single WHERE condition. These tools add a parameterized version of the Custom Query Web Parts, allowing you to define fields that match your Custom Query's Parameters and pass values easily.