Change this code to not construct SQL queries directly from user data

Constructing SQL queries directly from user-controlled data can lead to SQL injection vulnerabilities, where an attacker can manipulate the input to execute arbitrary SQL commands. You should avoid constructing SQL queries dynamically using user input. Instead, consider using parameterized queries, which separate the SQL code from the user input.

string sqlQuery = "SELECT * FROM public.\"" + tableName + "\" WHERE \"" + attributeName + "\" = @attributeValue";

using (var connection = new SqlConnection(connectionString))
{
    using (var command = new SqlCommand(sqlQuery, connection))
    {
        command.Parameters.AddWithValue("@attributeValue", attributeValue);

        // Execute the query
    }
}