avoiding SQL injection without the need to replace words

on an ASP website

[Simon606]

Hi

I have an ASP website that is reliant on user generated content. How do I stop SQL injection attacks without the need to replace words like , Join, Select, Delete etc.

I have searched everywhere but cannot find an answer.

Please can you help?

[dataguy]

I just stickied you the functions that I use to validate values in SQL statements. I've been using these functions for years on dozens of web sites.

The sticky mail removes the indentations so it's a little hard to read, sorry.

Let me know if you have any questions.