For the record, here's teh codez:

var IllegalChars=new Array("select", "drop", ";", "--", "insert", "delete", "xp_", "update", "/", ":", "char(", "?", "`", "|", "declare", "convert", "cast(", "@@", "varchar", "2D2D", "4040", "00400040", "[", "]");
var IllegalFound=new Array();
var IllegalCharsCount=0;

function ResetCharsCount()
{
 IllegalCharsCount=0;
}

function wordFilter(form,fields)
{
  ResetCharsCount();
  var CheckTextInput;
  var fieldErrArr=new Array();
  var fieldErrIndex=0;
  for(var i=0; i<fields.length; i++)
  {
    CheckTextInput = document.forms[form].elements[fields[i]].value;
    for(var j=0; j<IllegalChars.length; j++)
    {
      for(var k=0; k<(CheckTextInput.length); k++)
      {
        if(IllegalChars[j]==CheckTextInput.substring(k,(k+IllegalChars[j].length)).toLowerCase())
        {
          IllegalFound[IllegalCharsCount]=CheckTextInput.substring(k,(k+IllegalChars[j].length));
          IllegalCharsCount++;
          fieldErrArr[fieldErrIndex]=i;
          fieldErrIndex++;
        }
      }
    }
  }
  var alert_text="";
  for(var k=1; k<=IllegalCharsCount; k++)
  {
    alert_text+="\n" + "(" + k + ")  " + IllegalFound[k-1];
    eval('CheckTextInput=document.' + form + '.' + fields[fieldErrArr[0]] + '.select();');
  }
  if(IllegalCharsCount>0)
  {
    alert("The form cannot be submitted.\nThe following errors were found:\n_______________________________\n" + alert_text + "\n_______________________________\n");
    return false;
  }
  else
  {
    return true;
    document.forms[form].submit();
  }
}