防sql注入Replace區(qū)分大小寫

發(fā)布時間：2020-07-19 01:43:49 來源：網(wǎng)絡(luò) 閱讀：1369 作者：小仙女KOMons 欄目：編程語言

以下針對c#.net

首先添加引用Microsoft.VisualBasic.Dll

引入命名空間using Microsoft.VisualBasic;

使用Replace方法，以下為參數(shù)：

Strings.Replace(原字符串的內(nèi)容,要替換的字段內(nèi)容,替換后的字段內(nèi)容,從第幾位開始替換(注意默認為1),替換的次數(shù)(-1表示所有),是否無視大小寫);

例：

public static string cutHtml(string str)

{

str = Strings.Replace(str, "<", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, ">", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, """, "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "delete", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "script", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "update", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "exec", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "insert", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "object", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "function", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "drop", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "rename", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "mid", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "exists", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "alter", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "\"", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, "\'", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, ";", "", 1, -1, CompareMethod.Text);

str = Strings.Replace(str, ",", "", 1, -1, CompareMethod.Text);

return str;

}

如果您有更好的防sql注入方法請留言我將非常感謝

向AI問一下細節(jié)

猜你喜歡