bool CheckParams(string args)

        {

            string[] Lawlesses ={ "'", "xp_cmdshell", "net user", "exec", "insert", "select", "delete", "update", "count", "master", "truncate", "char", "declare" };

            for (int i = 0; i < Lawlesses.Length; i++)

            {

                Regex r = new Regex(Lawlesses[i]);

                Match m = r.Match(args);

                if (m.Success)

                    return false;

            }

            return true;

        }