Validate String For Sql Injection C