<?php function inject_check($sql_str) {   $check=eregi('select|insert|updat...