\/\/|\.\.\/|%0d%0a|0x|\ba(?:ll\b|lert\b|scii\()\b|\bb(?:ase64\b|enchmark\b|y\b)|\bc(?:ase\b|har\b|olumn\b|onvert\b|ookie\b|reate\b)|\bd(?:eclare\b|ata\b|ate\b|elete\b|rop\b)|concat|e(?:rror|tc|val|xec|xtractvalue)|f(?:rom|tp)|g(?:rant|roup)|having|\bi(?:f\b|nsert\b|snull\b|nto\b)|j(?:s|json)|koi8r|l(?:ength\(|oad)|master|onmouse|null|php|\bs(?:chema\b|elect\b|et\b|hell\b|how\b|leep\b)|\btable\b|u(?:nion|pdate|ser|tf)|var|w(?:aitfor|hen|here|hile)" $,:;@\'.%3C%3E^*()!\/\[\]\|- (?:abs|ascii|base64|bin|cast|chr|char|charset|collation|concat|conv|convert|count|curdate|database|date|decode|diff|distinct|else|elt|end|encode|encrypt|extract|field|_file|floor|format|hex|hostname|if|inner|insert|instr|interval|join|koi8r|lcase|left|length|like|load_file|locate|lock|log|lower|lpad|ltrim|max|md5|mid|mod|name|now|null|ord|password|position|quote|rand|repeat|replace|reverse|right|rlike|round|row_count|rpad|rtrim|_set|schema|sha1|sha2|sha3|serverproperty|soundex|space|strcmp|substr|substr_index|substring|sum|time|trim|truncate|ucase|unhex|upper|_user|user|values|varchar|version|while|ws|xor)|_(?:decrypt|encrypt|get|post|server|cookie|global|or|request|xor)|(?:column|db|load|not|octet|sql|table|xp)_|@@|_and|absolute|\baction\b|\badd\b|\ball\b|allocate|\balter\b|\basc\b|assertion|authorization|avg|base64|\bbegin\b|benchmark|between|\bbit\b|bitlength|bit_length|both|bulk|\bcall\b|cascade|cascaded|\bcase\b|catalog|char_length|\bcheck\b|\bclose\b|coalesce|collate|commit|condition|\bconnect\b|connection|constraint|constraints|contains|continue|\bcount\b|corresponding|\bcross\b|\bcurrent\b|current_date|\bdate\b|current_path|current_time|current_timestamp|current_user|deallocate|decimal|default|deferrable|deferred|\bdesc\b|describe|descriptor|deterministic|diagnostics|decode|disconnect|distinct|domain|double|\bdrop\b|dump|elseif|encode|escape|except|execute|exists|exit|export|external|exception|false|fetch|first|float|\bfor\b|foreign|found|full|function|\bgo\b|goto|grant|handler|having|identity|immediate|\bin\b|indicator|informa|initially|inout|input|insensitive|int\(|integer|intersect|interval|into|\bis\b|isolation|\bkey\b|language|\blast\b|leading|leave|level|limit|local|loop|madeby|\bmake\b|match|\bmin\b|minute|module|month|nchar|next|not_like|not_regexp|nullif|numeric|octet_length|only|\bopen\b|option|\border\b|\bout\b|outfile|outer|output|overlaps|\bpad\b|parameter|partial|\bpass\b|path|post|precision|prepare|preserve|primary|prior|\bpriv\b|privileges|procedure|read|real|references|regexp|relative|rename|resignal|restrict|return|revoke|rollback|routine|rows|server|scroll|second|section|session|session_user|\bset\b|\bshell\b|sleep|signal|size|smallint|\bsome\b|specific|sqlcode|sqlerror|sqlexception|sqlstate|sqlwarning|system_user|temporary|\bto\b|trailing|transaction|translate|translation|timestamp|timezone_hour|timezone_minute|true|\bundo\b|unique|unknown|until|update|usage|using|varying|view|when|whenever|where|\bwith\b|work|write|\(0x|@@|cast|integer|auto_prepend_file|allow_url_include|0x3c62723e \bcolumn\b|\bdata\b|concat\(|\bemail\b|\blogin\b|\bname\b|\bpass\b|sha1|sha2|\btable\b|\bwhere\b|\buser\b|\bval\b|0x|-- alias|etc\/passwd|\/bin|\.(?:cmd|exe|htac|vbs|sh|htpa|ini|bat|log|sql)|\/(?:uploa|passw)d (?:(?:(?:\b|[^a-z])union[^a-z]|\()[\w\W]*(?:\b|[^a-z])select[^a-z]|(?:updatexml|extractvalue)(?:\b|[^a-z])[\w\W]*\()[\w\W]+(?:(?:0x|x')[0-9a-f]{16}|(?:0b|b')[01]{64}|\(|\|\||\+)