Defensive Database Programming with SQL Server. A. Kuznetsov

 This book describes a lot of specific problems, and typical approaches that will lead to more robust code, However, my main goal is more general: it is to demonstrate how to think defensively, and how to proactively identify and eliminate potential vulnerabilities in T-SQL code during development rather than after the event when the problems have already occurred.
The book breaks down into ten chapters, as described below. Eight of these chapters are available in this free eBook version; the final two chapters are included in paid versions only