Pretty much what undai says. It then comes down to building a dictionary of search queries and a 'blacklist'. The regex itself is relatively simple.