过滤sql匹配符号防止sql注入

最新推荐文章于 2024-04-09 21:47:51 发布

weixin_30478757

最新推荐文章于 2024-04-09 21:47:51 发布

阅读量281

点赞数

原文链接：http://www.cnblogs.com/smallfa/archive/2009/11/26/1611010.html

版权

/// <summary> /// 过滤sql中非法字符
         /// </summary>
        /// <param name="value"> 要过滤的字符串 </param>
        /// <returns> string </returns>
        public static string Filter( string value)
        {
            if ( string .IsNullOrEmpty(value)) return string .Empty;
            value = Regex.Replace(value, @" ; " , string .Empty);
            value = Regex.Replace(value, @" ' " , string .Empty);
            value = Regex.Replace(value, @" & " , string .Empty);
            value = Regex.Replace(value, @" %20 " , string .Empty);
            value = Regex.Replace(value, @" -- " , string .Empty);
            value = Regex.Replace(value, @" == " , string .Empty);
            value = Regex.Replace(value, @" < " , string .Empty);
            value = Regex.Replace(value, @" > " , string .Empty);
            value = Regex.Replace(value, @" % " , string .Empty);

            return value;
        }

转载于:https://www.cnblogs.com/smallfa/archive/2009/11/26/1611010.html