ASP SQL anti-injection program and keyword shielding program

Dim sql_injdata
Sql_injdata = "Exec|insert|select|delete|update|count|*|mid|master|truncate|char|declare"
Sql_inj = Split (Sql_injdata, "|")

If request.querystring<> "" Then
For each sql_get in Request.QueryString
For Sql_data=0 to Ubound (Sql_inj)
If InStr (Request (Sql_get), Sql_inj (sql_data)) >0 Then%>
<script Language=javascript>history.back ( -1);</script>
<%end if
Next
Next
End If

function Kill_keyword (TXT)
EXECC = "SELECT * FROM Kill_keyword"
Set RSCC = Server.CreateObject ("Adodb.recordset")
Rscc.open execc,conn,3,3
For Ic=1 to Rscc.recordcount
HEADK = ""
KILLX = ""
Kill = RSCC ("keyword")
If Len (Kill) >1 Then
HEADK = Left (kill,1)
For Jc=1 to Len (kill)-1
KILLX = killx + "*"
Next
Else
Headk= ""
killx= "*"
End If

TXT = replace (TXT,KILL,HEADK + killx)
Rscc.movenext
Next
Kill_keyword = txt
End Function