I'm the kind of guy who believes in keeping as much logic as you can inside the database server. My standard practice for data-driven websites is to never write any SQL (or LINQ, etc.) in my .NET code ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results