I hate these kind of defenses. If your application is vulnerable to sqli, select is one of many tools an attacker can use and you’re pretty much screwed anyway.
Instead, use sane tooling, like modern ORMs and parameter izers, with some data sanitation if you’re really paranoid.
Instead, use sane tooling, like modern ORMs and parameter izers, with some data sanitation if you’re really paranoid.