java 过滤sql特殊字符_JAVA中过滤特殊字符预防SQL注入

packagecn.com.hbivt.util;public classStringUtils {//过滤通过页面表单提交的字符

private static String[][] FilterChars={{"",">"},{" "," "},{"\"","""},{"&","&"},

{"/","/"},{"\\","\"},{"\n","
"}};//过滤通过javascript脚本处理并提交的字符

private static String[][] FilterScriptChars={{"\n","\'+\'\\n\'+\'"},

{"\r"," "},{"\\","\'+\'\\\\\'+\'"},

{"\'","\'+\'\\\'\'+\'"}};/*** 用特殊的字符连接字符串

*@paramstrings 要连接的字符串数组

*@paramspilit_sign 连接字符

*@return连接字符串*/

public staticString stringConnect(String[] strings,String spilit_sign){

String str="";for(int i=0;i

str+=strings[i]+spilit_sign;

}returnstr;

}/*** 过滤字符串里的的特殊字符

*@paramstr 要过滤的字符串

*@return过滤后的字符串*/

public staticString stringFilter(String str){

String[] str_arr=stringSpilit(str,"");for(int i=0;i

str_arr[i]=FilterChars[j][1];

}

}return (stringConnect(str_arr,"")).trim();

}/*** 过滤脚本中的特殊字符(包括回车符(\n)和换行符(\r))

*@paramstr 要进行过滤的字符串

*@return过滤后的字符串

* 2004-12-21 闫*/

public staticString stringFilterScriptChar(String str){

String[] str_arr=stringSpilit(str,"");for(int i=0;i

str_arr[i]= FilterScriptChars[j][1];

}

}return(stringConnect(str_arr,"")).trim();

}/*** 分割字符串

*@paramstr 要分割的字符串

*@paramspilit_sign 字符串的分割标志

*@return分割后得到的字符串数组*/

public staticString[] stringSpilit(String str,String spilit_sign){

String[] spilit_string=str.split(spilit_sign);if(spilit_string[0].equals(""))

{

String[] new_string=new String[spilit_string.length-1];for(int i=1;i

new_string[i-1]=spilit_string[i];returnnew_string;

}else

returnspilit_string;

}/*** 字符串字符集转换

*@paramstr 要转换的字符串

*@return转换过的字符串*/

public staticString stringTransCharset(String str){

String new_str=null;try{

new_str=new String(str.getBytes("iso-8859-1"),"GBK");

}catch(Exception e){

e.printStackTrace();

}returnnew_str;

}/*** 测试字符串处理类

*@paramargs 控制台输入参数*/

public static voidmain(String[] args){//测试字符串过滤

String t_str1="

StringDispose字符串 处理\n\r\'\"

";

System.out.println("过滤前："+t_str1);

System.out.println("过滤后："+StringUtils.stringFilter(t_str1));//测试合并字符串

String[] t_str_arr1={"PG_1","PG_2","PG_3"};

String t_str2=StringUtils.stringConnect(t_str_arr1,",");

System.out.println(t_str2);//测试拆分字符串

String[] t_str_arr2=StringUtils.stringSpilit(t_str2,",");for(int i=0;i

System.out.println(t_str_arr2[i]);

}

}

}