参数过滤

转换

	public static String replace(String src, String oldstr, String newstr){
		
        if (src == null) return null;

        StringBuffer dest = new StringBuffer("");
        
        int  len 	= oldstr.length();
        int  srclen = src.length();
        int  pos 	= 0;
        int  oldpos = 0;

        while ((pos = src.indexOf(oldstr, oldpos)) >= 0) {
            dest.append(src.substring(oldpos, pos));
            dest.append(newstr);
            oldpos = pos + len;
        }

        if (oldpos < srclen)
            dest.append(src.substring(oldpos, srclen));
        return dest.toString();
    }	

 转换

	public static String escape(String str) {
		if (str == null) return "";
		char[] chars = str.toCharArray();
		StringBuffer sb = new StringBuffer();
		for (int i = 0; i < chars.length; i++) {
			switch (chars[i]) {
			case '\'':
			 	sb.append("\"");
			 	break;
			case '(':
				sb.append("&#40;");
			  	break;
			case ')':
			  	sb.append("&#41;");
			  	break;
			case '#':
				sb.append("&#35;");
				break;
			case '&':
				sb.append("&#38");
				break;
			case '<':
				sb.append("&lt;");
				break;
			case '>':
				sb.append("&gt;");
				break;
			case '\"':
				sb.append("&quot;");
				break;
			default:
				sb.append(chars[i]);
			}
		}
		return sb.toString();
	}

过滤

    public String getFilTer(String str){
    	str = EasyString.escape(str);
    	str = EasyString.replace(str,"'","\"");	
    	str = str.trim();
    	return str;
    }