替换sql查询非法字符

/// 
   /// 替换非法字符 (杨军 06.9.6-11:52am)
   /// 
   /// 需要检查的字符串
   /// string
   public static string ReplaceDangerCode (string Temp)
   {
    Temp = Temp.Replace("“”",""); 
    Temp = Temp.Replace("\"","");
    Temp = Temp.Replace("or","");
    Temp = Temp.Replace("&","");
    Temp = Temp.Replace("*","");
    Temp = Temp.Replace("select ","");
    Temp = Temp.Replace("insert ","");
    Temp = Temp.Replace("delete ","");
    Temp = Temp.Replace("count(","");
    Temp = Temp.Replace("drop table ","");
    Temp = Temp.Replace("update ","");
    Temp = Temp.Replace("truncate ","");
    Temp = Temp.Replace("asc(","");
    Temp = Temp.Replace("mid(","");
    Temp = Temp.Replace("char(","");
    Temp = Temp.Replace("xp_cmdshell","");
    Temp = Temp.Replace("exec master","");
    Temp = Temp.Replace("net localgroup administrators","");
    Temp = Temp.Replace(" and ","");
    Temp = Temp.Replace("net user","");
    Temp = Temp.Replace(" or ","");
    Temp = Temp.Replace("@","");
    return Temp;
   }

//上面的中文双引号替换为单引号