sql转义字符

sql有不少转义字符，需要注意一下，转换一下再存进去就Ok了

public string EnCode(string content)
  {
   string str1=content.Replace("<","&lt;");
   string str2=str1.Replace(">","&gt;");
   string str3=str2.Replace("'","&apos;");
   string str4=str3.Replace(" ","&nbsp;");
   string str5=str4.Replace("/r/n","<br>");
   string str6=str5.Replace("/"","&quot;");
   string str7=str6.Replace("&","&amp;");
   return str7;
           
  }

  public string UnCode(string content)
  {
   string str1=content.Replace("&amp;","&");
   string str2=str1.Replace("&quot;","/"");
   string str3=str2.Replace("<br>","/r/n");
   string str4=str3.Replace("&nbsp;"," ");
   string str5=str4.Replace("'","&apos;");
            string str6=str5.Replace("&gt;",">");
   string str7=str6.Replace("&lt;","<");   
   return str7;
  }
 }