python 利用请求钩子解决sql注入问题

@app.before_request
def before_request():
if request.method == ‘GET’:
data =request.args
else:
data =request.form.items()
data = [v for k,v in data]
if data:
for v in data:
v= str(v).lower()
pattern = r"\b(and|like|exec|insert|select|drop|grant|alter|delete|update|count|chr|mid|master|truncate|char|delclare|or)\b|(*|;)"
r = re.search(pattern,v)
if r:
return ‘请输入规范的参数！’