Avoiding SQL Injection using Parameters

Question

SQL injection can be avoided by using Parameters is a well known fact. I just want a detailed idea of how it works. Thanks in Advance.