sql injection

Nov 7 2009 6:56 AM

if i use stored procedure in my website,is it possible hackers use sql injection in my website?
and how can i send some information to next page like qureystring but send information do not show in url?