.net anti-SQL injection utility code case