网站的SQL数据库安全问题！

我刚做了个比较完整的网站，可以注册，充值等等，用的是sql数据库，但并没有进行过任何的安全处理，也不了解应该如何加密，请问我应该怎样做，应该加如一些什么语句或设置？

'替换非法字符函数

Function SQLFixup(TextIn)

SQLFixup = Replace(TextIn, "'", "''", 1)

SQLFixup = Replace(TextIn,Chr(0),"", 1, -1, 1)

SQLFixup = Replace(TextIn, """", """, 1, -1, 1)

SQLFixup = Replace(TextIn,"<","<", 1, -1, 1)

SQLFixup = Replace(TextIn,">",">", 1, -1, 1)

SQLFixup = Replace(TextIn, "script", "script", 1, -1, 0)

SQLFixup = Replace(TextIn, "SCRIPT", "SCRIPT", 1, -1, 0)

SQLFixup = Replace(TextIn, "Script", "Script", 1, -1, 0)

SQLFixup = Replace(TextIn, "script", "Script", 1, -1, 1)

SQLFixup = Replace(TextIn, "object", "object", 1, -1, 0)

SQLFixup = Replace(TextIn, "OBJECT", "OBJECT", 1, -1, 0)

SQLFixup = Replace(TextIn, "Object", "Object", 1, -1, 0)

SQLFixup = Replace(TextIn, "object", "Object", 1, -1, 1)

SQLFixup = Replace(TextIn, "applet", "applet", 1, -1, 0)

SQLFixup = Replace(TextIn, "APPLET", "APPLET", 1, -1, 0)

SQLFixup = Replace(TextIn, "Applet", "Applet", 1, -1, 0)

SQLFixup = Replace(TextIn, "applet", "Applet", 1, -1, 1)

SQLFixup = Replace(TextIn, "[", "[")

SQLFixup = Replace(TextIn, "]", "]")

SQLFixup = Replace(TextIn, """", "", 1, -1, 1)

SQLFixup = Replace(TextIn, "=", "=", 1, -1, 1)

SQLFixup = Replace(TextIn, "'", "''", 1, -1, 1)

SQLFixup = Replace(TextIn, "select", "select", 1, -1, 1)

SQLFixup = Replace(TextIn, "execute", "execute", 1, -1, 1)

SQLFixup = Replace(TextIn, "exec", "exec", 1, -1, 1)

SQLFixup = Replace(TextIn, "join", "join", 1, -1, 1)

SQLFixup = Replace(TextIn, "union", "union", 1, -1, 1)

SQLFixup = Replace(TextIn, "where", "where", 1, -1, 1)

SQLFixup = Replace(TextIn, "insert", "insert", 1, -1, 1)

SQLFixup = Replace(TextIn, "delete", "delete", 1, -1, 1)

SQLFixup = Replace(TextIn, "update", "update", 1, -1, 1)

SQLFixup = Replace(TextIn, "like", "like", 1, -1, 1)

SQLFixup = Replace(TextIn, "drop", "drop", 1, -1, 1)

SQLFixup = Replace(TextIn, "create", "create", 1, -1, 1)

SQLFixup = Replace(TextIn, "rename", "rename", 1, -1, 1)

SQLFixup = Replace(TextIn, "count", "count", 1, -1, 1)

SQLFixup = Replace(TextIn, "chr", "chr", 1, -1, 1)

SQLFixup = Replace(TextIn, "mid", "mid", 1, -1, 1)

SQLFixup = Replace(TextIn, "truncate", "truncate", 1, -1, 1)

SQLFixup = Replace(TextIn, "nchar", "nchar", 1, -1, 1)

SQLFixup = Replace(TextIn, "char", "char", 1, -1, 1)

SQLFixup = Replace(TextIn, "alter", "alter", 1, -1, 1)

SQLFixup = Replace(TextIn, "cast", "cast", 1, -1, 1)

SQLFixup = Replace(TextIn, "exists", "exists", 1, -1, 1)

SQLFixup = Replace(TextIn,Chr(13),"<br>", 1, -1, 1)

End Function

给你一段防注入的函数

使用方法

SQLFixup(参数值)

• ·我的OUTLOOK出现了问题
• ·怎么使脸变得有消瘦的感觉
• ·一个绝对寻找下联
• ·delphi问题
• ·重装windows XP系统的具体步骤有哪些？
• ·关于电驴一个问题
• ·我儿子挂点滴加药有先锋为什么会出汗？
• ·去太空的一些资料!!!!!!!
• ·喝黑咖啡真的能减肥么
• ·几个航天知识的小问题