function SQL_Injection( get_String )
 get_String = Replace(get_String,"'","''")
 get_String = Replace(get_String,";","")
 get_String = Replace(get_String,"--","")
 get_String = Replace(get_String,"select","",1,-1,1)
 get_String = Replace(get_String,"insert","",1,-1,1)
 get_String = Replace(get_String,"update","",1,-1,1)
 get_String = Replace(get_String,"drop","",1,-1,1)
 get_String = Replace(get_String,"union","",1,-1,1)
 get_String = Replace(get_String,"and","",1,-1,1)
 get_String = Replace(get_String,"or","",1,-1,1)
 get_String = Replace(get_String,"1=1","",1,-1,1)
 get_String = Replace(get_String,"sp_","",1,-1,1)
 get_String = Replace(get_String,"xp_","",1,-1,1)
 get_String = Replace(get_String,"@variable","",1,-1,1)
 get_String = Replace(get_String,"@@variable","",1,-1,1)
 get_String = Replace(get_String,"exec","",1,-1,1)
 get_String = Replace(get_String,"sysobject","",1,-1,1)
 SQL_Injection = get_String

end Function