C#删除sql注入威胁

C#删除sql注入威胁

/// 
/// 删除sql注入威胁
/// 
/// 
/// 
public static string FilterSql(string s)
{
    if (string.IsNullOrEmpty(s)) return string.Empty;
    s = s.Trim();
    //s = s.Replace("=", "");
    s = Regex.Replace(s, "'", "", RegexOptions.IgnoreCase);
    s = Regex.Replace(s, ";", "", RegexOptions.IgnoreCase);
    s = Regex.Replace(s, " or ", "", RegexOptions.IgnoreCase);
    s = Regex.Replace(s, "select", "", RegexOptions.IgnoreCase);
    s = Regex.Replace(s, "update", "", RegexOptions.IgnoreCase);
    s = Regex.Replace(s, "insert", "", RegexOptions.IgnoreCase);
    s = Regex.Replace(s, "delete", "", RegexOptions.IgnoreCase);
    s = Regex.Replace(s, "declare", "", RegexOptions.IgnoreCase);
    s = Regex.Replace(s, "exec", "", RegexOptions.IgnoreCase);
    s = Regex.Replace(s, "drop", "", RegexOptions.IgnoreCase);
    s = Regex.Replace(s, "create", "", RegexOptions.IgnoreCase);
    s = Regex.Replace(s, "%", "", RegexOptions.IgnoreCase);
    s = Regex.Replace(s, "--", "", RegexOptions.IgnoreCase);
    return s;
}

以上就是短码网小编为大家整理的《C#删除sql注入威胁》相关内容，希望大家喜欢。