no not directly. you have to do it as a developer. One way to help prevent SQL Injections is to use parameters instead of creating your SQL string on the fly.
Other than that some common things to do is replace a single quote with double quote, filter out things like '--' which is a comment in SQL Server, and ignore things like 'xp_' or 'sp_' which can be used to call system stored procedures.