title: preventing SQL Injection using regular expression
body: <p>I know it is so wrong to defend SQL Injection this way (regular expression) and i must use parametrized queries but this time i have an special situation. I'm writing a form generator program and i have to write a complicated search user control so this time there is no other way for me (I think)!</p>
  
  <p>Any way i am looking for a regular expression to check input strings (server side) whether there is any attack like queries on it or not.</p>