Does this parser detect sql injection?

[fineday009]

Does this parser detect sql injection? how?

[ghost]

SQL injection is valid syntax, so 100% confidence detection is difficult. But there are methods to mitigate it:

• Save the digest of expected queries to an allow list, block new queries that do not match.
• Disallow multiple statements from being executed at once. This prevents a SELECT statement being early terminated, and then an injected DELETE statement following.