Coding and Security

I would like to know what are lacunas when we code
Should we use Session variable if not why and passing the select statement is harmful.
I would like to kno whatz the advantage of writing stored procedures and passing only parameters.