日期:2014-05-18 浏览次数:20865 次
private string Injection(string wd) { string InjeTxt = "select|update |insert |delete |declare |@ |exec |= |< |> "; string[] InjeTxtArr; InjeTxtArr = InjeTxt.Split('|'); for (int i = 0; i < InjeTxtArr.Length; i++) { wd = wd.Replace(InjeTxtArr[i].ToString(), ","); } return wd; }
------解决方案--------------------
wd = wd.Replace(InjeTxtArr[i].ToString(), ",");