C#（ASP.NET）正则表达式 过滤危险字符函数代码 防SQL注入 很全面的SQL关键字过滤

sing System;  
using System.Collections.Generic;  
using System.Linq;  
using System.Text;  

using System.Collections;
using System.Text.RegularExpressions;  

  
namespace BIReportCenter.Utility  
{  
    public class StringHelper  
    {  
        #region String length formatter  
  
        /// <summary>  
        /// 对字符串进行裁剪  
        /// </summary>  
        public static string Trim(string stringTrim, int maxLength)  
        {  
            return Trim(stringTrim, maxLength, "...");  
        }  
  
        /// <summary>  
        /// 对字符串进行裁剪(区分单字节及双字节字符)  
        /// </summary>  
        /// <param name="rawString">需要裁剪的字符串</param>  
        /// <param name="maxLength">裁剪的长度，按双字节计数</param>  
        /// <param name="appendString">如果进行了裁剪需要附加的字符</param>  
        public static string Trim(string rawString, int maxLength, string appendString)  
        {  
            if (string.IsNullOrEmpty(rawString) || rawString.Length <= maxLength)  
            {  
                return rawString;  
            }  
            else  
            {  
                int rawStringLength = Encoding.UTF8.GetBytes(rawString).Length;  
                if (rawStringLength <= maxLength * 2)  
                    return rawString;  
            }  
  
            int appendStringLength = Encoding.UTF8.GetBytes(appendString).Length;  
            StringBuilder checkedStringBuilder = new StringBuilder();  
            int appendedLenth = 0;  
            for (int i = 0; i < rawString.Length; i++)  
            {  
                char _char = rawString[i];  
                checkedStringBuilder.Append(_char);  
  
                appendedLenth += Encoding.Default.GetBytes(new char[] { _char }).Length;  
  
                if (appendedLenth >= maxLength * 2 - appendStringLength)  
                    break;  
            }  
  
            return checkedStringBuilder.ToString() + appendString;  
        }  
 
 
        #endregion  
 
        #region 特殊字符  
  
        /// <summary>  
        /// 检测是否有Sql