Common/AchieveCommon/SqlInjection.cs

微信扫码关注公众号，代码整理好后第一时间通知你。

namespace AchieveCommon
{
    /// <summary>
    /// 简单的SQL防注入类
    /// </summary>
    public class SqlInjection
    {
        /// <summary>
        /// 关键字过滤
        /// </summary>
        /// <param name="originalString">原始串</param>
        /// <returns>返回True就是找到了可能sql注入的关键字</returns>
        public static bool GetString(string originalString)
        {
            //参考：technet.microsoft.com/zh-cn/library/ms161953.aspx
            if (originalString.IndexOf(";") != -1 || originalString.IndexOf("'") != -1 || originalString.IndexOf("--") != -1 || originalString.IndexOf("/*") != -1 || originalString.IndexOf("*/") != -1 || originalString.IndexOf("xp_cmdshell") != -1)
                return true;
            else
                return false;
        }
    }
}