if (strstr($query_string,"select") || strstr($query_string,"update") || strstr($query_string,"delete") || strstr($query_string,"@@")){
echo "SQL Injection";