日期:2014-05-18 浏览次数:21019 次
private string Injection(string wd)
{
string InjeTxt = "select|update |insert |delete |declare |@ |exec |= |< |> ";
string[] InjeTxtArr;
InjeTxtArr = InjeTxt.Split('|');
for (int i = 0; i < InjeTxtArr.Length; i++)
{
wd = wd.Replace(InjeTxtArr[i].ToString(), ",");
}
return wd;
}
------解决方案--------------------
wd = wd.Replace(InjeTxtArr[i].ToString(), ",");