title: Allow user to enter SQL select statement in web application disabling updates
body: <p>I need to allow users to enter SQL select statements in my web application; these select statements will be used to generate the options in a customized dropdownlist.</p>
  
  <p>So I have a field on the UI where the user enters a select; how to prohibit the user of entering an insert/update/delete? I could check that the first statement word is <code>select</code> however they could enter multiple statements on the UI separated by semicolons.</p>