Easy.COMMON/StaticFunction.cs

这里只显示每个文件的开头 60 行。登录后可以解锁完整代码。

微信扫码关注公众号，代码整理好后第一时间通知你。

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Collections;
using System.Web;
using System.Web.UI.WebControls;
using System.Text.RegularExpressions;
using ExeSql;
using System.Data;
using System.Data.SqlClient;
using System.IO;
using System.Net;
using System.Drawing;
using System.Drawing.Imaging;
using BLL;
using MyModels;
namespace Easy.COMMON
{
    public static class StaticFunction
    {
        public static string CheckLoginSql(string sql)
        {
            string reSql = "";
            if (sql == null)
            {
                return reSql;
            }
            reSql = sql;
            if (((((reSql.ToLower().Contains("=") || reSql.ToLower().Contains("+")) || (reSql.ToLower().Contains("object") || reSql.ToLower().Contains("frame"))) || ((reSql.ToLower().Contains(":") || reSql.ToLower().Contains(";")) || (reSql.ToLower().Contains(",") || reSql.ToLower().Contains("script")))) || (((reSql.ToLower().Contains("javascript") || reSql.ToLower().Contains("/")) || (reSql.ToLower().Contains("<") || reSql.ToLower().Contains(">"))) || reSql.ToLower().Contains("&lt;"))) || reSql.ToLower().Contains("&gt;"))
            {
                HttpContext.Current.Response.Redirect("/error/errorparam.html");
            }
            return Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(reSql.Replace("\"", "").Replace("'", "").Replace("'", "").Replace("/", "").Replace(")", "").Replace("(", "").Replace("<", "").Replace(">", "").Replace("#", "").Replace("+", "").Replace("*", "").Replace(";", "").Replace("[", "").Replace("]", "").Replace("=", "").Replace("-", "").Replace(",", "").Replace("|", "").Replace("%", "").Replace("%", "").Replace("&", "").Replace(":", ""), "script", "", RegexOptions.IgnoreCase), "javascript", "", RegexOptions.IgnoreCase), "object", "", RegexOptions.IgnoreCase), "applet", "", RegexOptions.IgnoreCase), "&nbsp;", "", RegexOptions.IgnoreCase), "frame", "", RegexOptions.IgnoreCase), "truncate", "", RegexOptions.IgnoreCase), "select", "", RegexOptions.IgnoreCase), "execute", "", RegexOptions.IgnoreCase), "exec", "", RegexOptions.IgnoreCase), "join", "", RegexOptions.IgnoreCase), "union", "", RegexOptions.IgnoreCase), "where", "", RegexOptions.IgnoreCase), "insert", "", RegexOptions.IgnoreCase), "delete", "", RegexOptions.IgnoreCase), "update", "", RegexOptions.IgnoreCase), "drop", "", RegexOptions.IgnoreCase), "create", "", RegexOptions.IgnoreCase), "rename", "", RegexOptions.IgnoreCase), "count", "", RegexOptions.IgnoreCase), "chr", "", RegexOptions.IgnoreCase), "mid", "", RegexOptions.IgnoreCase), "truncate", "", RegexOptions.IgnoreCase), "nchar", "", RegexOptions.IgnoreCase), "char", "", RegexOptions.IgnoreCase), "alter", "", RegexOptions.IgnoreCase), "cast", "", RegexOptions.IgnoreCase), "exists", "", RegexOptions.IgnoreCase), "having", "", RegexOptions.IgnoreCase), "debug", "", RegexOptions.IgnoreCase), "net localgroup administrators", "", RegexOptions.IgnoreCase), "net user", "", RegexOptions.IgnoreCase), "xp_cmdshell", "", RegexOptions.IgnoreCase), "declare", "", RegexOptions.IgnoreCase), "cast", "", RegexOptions.IgnoreCase);
        }
        public static string GetPicExt()
        {
            string exi = ",.gif,.jpg,.jpeg,.png";
            return exi;
        }
        public static int GetPicSize()
        {
            int result = 0;
            return result;

        }

        public static string CheckSql(string sql)
        {
            string reSql = "";
            if (sql == null)
            {
                return reSql;
            }
            reSql = sql;
            if (((((reSql.ToLower().Contains("=") || reSql.ToLower().Contains("+")) || (reSql.ToLower().Contains("object") || reSql.ToLower().Contains("frame"))) || ((reSql.ToLower().Contains(":") || reSql.ToLower().Contains(";")) || (reSql.ToLower().Contains(",") || reSql.ToLower().Contains("script")))) || (((reSql.ToLower().Contains("javascript") || reSql.ToLower().Contains("/")) || (reSql.ToLower().Contains("<") || reSql.ToLower().Contains(">"))) || reSql.ToLower().Contains("&lt;"))) || reSql.ToLower().Contains("&gt;"))
            {
                HttpContext.Current.Response.Redirect("/error/errorparam.html");
            }
            return Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(Regex.Replace(reSql.Replace("\"", "").Replace("'", "").Replace("'", "").Replace("/", "").Replace(")", "").Replace("(", "").Replace("<", "").Replace(">", "").Replace("#", "").Replace("+", "").Replace("*", "").Replace(";", "").Replace("[", "").Replace("]", "").Replace("=", "").Replace("-", "").Replace(",", "").Replace("|", "").Replace("%", "").Replace("@", "").Replace("%", "").Replace("&", "").Replace(":", ""), "script", "", RegexOptions.IgnoreCase), "javascript", "", RegexOptions.IgnoreCase), "object", "", RegexOptions.IgnoreCase), "applet", "", RegexOptions.IgnoreCase), "&nbsp;", "", RegexOptions.IgnoreCase), "frame", "", RegexOptions.IgnoreCase), "truncate", "", RegexOptions.IgnoreCase), "select", "", RegexOptions.IgnoreCase), "execute", "", RegexOptions.IgnoreCase), "exec", "", RegexOptions.IgnoreCase), "join", "", RegexOptions.IgnoreCase), "union", "", RegexOptions.IgnoreCase), "where", "", RegexOptions.IgnoreCase), "insert", "", RegexOptions.IgnoreCase), "delete", "", RegexOptions.IgnoreCase), "update", "", RegexOptions.IgnoreCase), "like", "", RegexOptions.IgnoreCase), "drop", "", RegexOptions.IgnoreCase), "create", "", RegexOptions.IgnoreCase), "rename", "", RegexOptions.IgnoreCase), "count", "", RegexOptions.IgnoreCase), "chr", "", RegexOptions.IgnoreCase), "mid", "", RegexOptions.IgnoreCase), "truncate", "", RegexOptions.IgnoreCase), "nchar", "", RegexOptions.IgnoreCase), "char", "", RegexOptions.IgnoreCase), "alter", "", RegexOptions.IgnoreCase), "cast", "", RegexOptions.IgnoreCase), "exists", "", RegexOptions.IgnoreCase), "and", "", RegexOptions.IgnoreCase), "or", "", RegexOptions.IgnoreCase), "having", "", RegexOptions.IgnoreCase), "debug", "", RegexOptions.IgnoreCase), "net localgroup administrators", "", RegexOptions.IgnoreCase), "net user", "", RegexOptions.IgnoreCase), "xp_cmdshell", "", RegexOptions.IgnoreCase), "asc", "", RegexOptions.IgnoreCase), "desc", "", RegexOptions.IgnoreCase), "declare", "", RegexOptions.IgnoreCase), "set", "", RegexOptions.IgnoreCase), "cast", "", RegexOptions.IgnoreCase);