sql injection defence using .htaccess 

RewriteEngine On
RewriteBase /

RewriteCond %{QUERY_STRING} (script|alert|etc|write|echo|cookie|document|sql|select|update|delete|where)
RewriteRule .* http://lleo.aha.ru/na/am/