The second part of Martin's SQL injection tutorial. http://blog.discountasp.net/how-to-use-request-filtering-to-prevent-sql-injections/