How do I implement regex in C++ fucntion to prevent sqli

See more:

C++

I need help modifying the function below. My assignment is to prevent SQL injection in C++. I figured out the best approach is to use regular expressions and regex to solve it but not sure how to implement it into the code. I'm supposed to flag "=" and possibly use regex_search() to search for " or = ".

This is the function:

bool run_query(sqlite3* db, const std::string& sql, std::vector< user_record >& records)
{
// TODO: Fix this method to fail and display an error if there is a suspected SQL Injection
// NOTE: You cannot just flag 1=1 as an error, since 2=2 will work just as well. You need
// something more generic

// clear any prior results
records.clear();

char* error_message;
if(sqlite3_exec(db, sql.c_str(), callback, &records, &error_message) != SQLITE_OK)
{
std::cout << "Data failed to be queried from USERS table. ERROR = " << error_message << std::endl;
sqlite3_free(error_message);
return false;
}

return true;
}

What I have tried:

I have tried to find resources on using regex inc++ but can't find anything to directly help with this assignment.