[0x0]

The better way to defend against SQLi would be to use proper quoting/prepared statements, instead of trying to play whack-a-mole by filtering and limiting the content of the input strings.

[skolor]

Correct, but that doesn't make the statement of the causes for SQLi any different.