I find links like this http://forums.asp.net/t/1254125.aspx which 'screen' for unacceptable words and characters in textboxes. I though it might be as simple as my code example below. Seems most attacks must at least include a semicolon(;). I added the -- and ' ' for added protection. I'm interested in what the experts here think 🙂
[ASP .NET C# Codebehind]
userName.Text = "; Delete Table Admin --";
if (!Regex.IsMatch(userName.Text, ";|--|' '))
{
//use textbox text...
}