If you know the websites that you want to block, and the list is not too big, you can use nbar.
ip cef
class-map match-any DROPSITE
match protocol http url "www.sex.com"
policy-map DROPSITE
class DROPSITE
drop
interface fastethernet 0/0/0
description LAN INTERFACE
service-policy input DROPSITE
Yuo can even use "*", so for example if you don't want users to visit any website that contains the word "sex" in the url
class-map match-any DROPSITE
match protocol http url "*sex*"