Shape Security interview question

How to protect database from SQL injection attack?