‫راهنمای مایکروسافت در مورد مقابله با SQL Injection

   Public Function sqlinj(ByVal text As String) As String
        text = Strings.Replace(text, "'", "")
        text = Strings.Replace(text, ",", "")
        text = Strings.Replace(text, "+", "")
        text = Strings.Replace(text, "&", "")
        text = Strings.Replace(text, "=", "")
        text = Strings.Replace(text, "%", "")
        text = Strings.Replace(text, ":", "")
        text = Strings.Replace(text, ";", "")
        text = Strings.Replace(text, "select", "")
        text = Strings.Replace(text, "delete", "")
        text = Strings.Replace(text, "insert", "")
        text = Strings.Replace(text, "update", "")
        text = Strings.Replace(text, "where", "")
        text = Strings.Replace(text, "union", "")
        text = Strings.Replace(text, "alter", "")
        text = Strings.Replace(text, "drop", "")
        text = Strings.Replace(text, "%", "")
        text = Strings.Replace(text, "_", "")
        Return text
    End Function