winform防止sqlserver注入_防止ＳＱＬ注入

1.[代码][C#]代码

#region 防止sql注入式攻击(可用于UI层控制)

///

/// 判断字符串中是否有SQL攻击代码

///

/// 传入用户提交数据

/// true-安全；false-有注入攻击现有；

public bool ProcessSqlStr(string inputString)

{

string SqlStr = @"and|or|exec|execute|insert|select|delete|update|alter|create|drop|count|\*|chr|char|asc|mid|substring|master|truncate|declare|xp_cmdshell|restore|backup|net +user|net +localgroup +administrators";

try

{

if ((inputString != null) && (inputString != String.Empty))

{

string str_Regex = @"\b(" + SqlStr + @")\b";

Regex Regex = new Regex(str_Regex, RegexOptions.IgnoreCase);

//string s = Regex.Match(inputString).Value;

if (true == Regex.IsMatch(inputString))

return false;

}

}<