sql过滤
Posted 322829
tags:
篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了sql过滤相关的知识，希望对你有一定的参考价值。
/// <summary>
/// sql过滤
/// </summary>
public static class Inpouring
/// <summary>
/// 过滤不安全的字符串
/// </summary>
/// <param name="Str"></param>
/// <returns></returns>
public static string FilteSQLStr(this string Str)
Str = Str.Replace("'", "");
Str = Str.Replace("\\"", "");
Str = Str.Replace("&", "&");
Str = Str.Replace("<", "<");
Str = Str.Replace(">", ">");
Str = Str.Replace("delete", "");
Str = Str.Replace("update", "");
Str = Str.Replace("insert", "");
return Str.TryString();
#region 过滤 Sql 语句字符串中的注入脚本
/// <summary>
/// 过滤 Sql 语句字符串中的注入脚本
/// </summary>
/// <param name="source">传入的字符串</param>
/// <returns>过滤后的字符串</returns>
public static string SqlFilter(string source)
//单引号替换成两个单引号
source = source.Replace("'", "''");
//半角封号替换为全角封号，防止多语句执行
source = source.Replace(";", "；");
//半角括号替换为全角括号
source = source.Replace("(", "（");
source = source.Replace(")", "）");
///要用正则表达式替换，防止字母大小写得情况
//去除执行存储过程的命令关键字
source = source.Replace("Exec", "");
source = source.Replace("Execute", "");
//去除系统存储过程或扩展存储过程关键字
source = source.Replace("xp_", "x p_");
source = source.Replace("sp_", "s p_");
//防止16进制注入
source = source.Replace("0x", "0 x");
return source;
#endregion
/// 过滤SQL字符。
/// </summary>
/// <param name="str">要过滤SQL字符的字符串。</param>
/// <returns>已过滤掉SQL字符的字符串。</returns>
public static string ReplaceSQLChar(this string str)
if (str == string.Empty)
return string.Empty;
str = str.Replace("'", "‘");
str = str.Replace(";", "；");
str = str.Replace(",", ",");
str = str.Replace("?", "?");
str = str.Replace("<", "＜");
str = str.Replace(">", "＞");
str = str.Replace("(", "(");
str = str.Replace(")", ")");
str = str.Replace("@", "＠");
str = str.Replace("=", "＝");
str = str.Replace("+", "＋");
str = str.Replace("*", "＊");
str = str.Replace("&", "＆");
str = str.Replace("#", "＃");
str = str.Replace("%", "％");
str = str.Replace("$", "￥");
return str;
/// <summary>
/// 过滤标记
/// </summary>
/// <param name="Nohtml">包括HTML，脚本，数据库关键字，特殊字符的源码 </param>
/// <returns>已经去除标记后的文字</returns>
public static string NoHtml(this string Htmlstring)
if (string.IsNullOrWhiteSpace(Htmlstring))
return "";
else
//删除脚本
Htmlstring = Regex.Replace(Htmlstring, @"<script[^>]*?>.*?</script>", "", RegexOptions.IgnoreCase);
//删除HTML
Htmlstring = Regex.Replace(Htmlstring, @"<(.[^>]*)>", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"([\\r\\n])[\\s]+", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"-->", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"<!--.*", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"&(quot|#34);", "\\"", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"&(amp|#38);", "&", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"&(lt|#60);", "<", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"&(gt|#62);", ">", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"&(nbsp|#160);", " ", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"&(iexcl|#161);", "\\xa1", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"&(cent|#162);", "\\xa2", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"&(pound|#163);", "\\xa3", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"&(copy|#169);", "\\xa9", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, @"&#(\\d+);", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "xp_cmdshell", "", RegexOptions.IgnoreCase);
//删除与数据库相关的词
Htmlstring = Regex.Replace(Htmlstring, "select", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "insert", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "delete from", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "count''", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "drop table", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "truncate", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "asc", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "mid", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "char", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "xp_cmdshell", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "exec master", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "net localgroup administrators", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "and", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "net user", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "or", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "net", "", RegexOptions.IgnoreCase);
//Htmlstring = Regex.Replace(Htmlstring, "*", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "-", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "delete", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "drop", "", RegexOptions.IgnoreCase);
Htmlstring = Regex.Replace(Htmlstring, "script", "", RegexOptions.IgnoreCase);
//特殊的字符
Htmlstring = Htmlstring.Replace("<", "");
Htmlstring = Htmlstring.Replace(">", "");
Htmlstring = Htmlstring.Replace("*", "");
Htmlstring = Htmlstring.Replace("-", "");
Htmlstring = Htmlstring.Replace("?", "");
Htmlstring = Htmlstring.Replace("'", "''");
Htmlstring = Htmlstring.Replace(",", "");
Htmlstring = Htmlstring.Replace("/", "");
Htmlstring = Htmlstring.Replace(";", "");
Htmlstring = Htmlstring.Replace("*/", "");
Htmlstring = Htmlstring.Replace("\\r\\n", "");
Htmlstring = Htmlstring.Trim();
return Htmlstring;
#region 抽象属性
/// <summary>
/// 数据库 True 和 False 值的设定
/// </summary>
private static int TrueValue get; = 1;
/// <summary>
/// False 值设定
/// </summary>
private static int FalseValue get; = 0;
/// <summary>
/// LIKE ‘%’
/// </summary>
private static string LikeString get; = "%";
private static string GetDateTimeSqlString(DateTime date, string format)
return ("'" + date.ToString(string.IsNullOrEmpty(format) ? @"yyyy-MM-dd HH\\:mm\\:ss" : format) + "'");
#endregion
/// <summary>
/// sql语句拼接字段处理函数
/// </summary>
/// <param name="value">value</param>
/// <returns></returns>
public static string GetLikeSqlValueString(this object value)
return GetLikeSqlValueString(value, true, true, null);
/// <summary>
/// sql语句拼接字段处理函数
/// </summary>
/// <param name="value"></param>
/// <param name="isLeftLike">左</param>
/// <param name="isRightLike">右</param>
/// <param name="dateFormat">时间格式</param>
/// <returns></returns>
public static string GetLikeSqlValueString(this object value, bool isLeftLike, bool isRightLike, string dateFormat)
string dateTimeSqlString = "";
if ((value == null) || (value == DBNull.Value))
return "NULL";
if (value is DateTime)
dateTimeSqlString = GetDateTimeSqlString((DateTime)value, dateFormat);
else if (value is bool)
if ((bool)value)
dateTimeSqlString = TrueValue.ToString();
else
dateTimeSqlString = FalseValue.ToString();
else if ((((value is decimal) || (value is short)) || ((value is int) || (value is long))) || ((((value is double) || (value is byte)) || ((value is sbyte) || (value is float))) || (((value is ushort) || (value is uint)) || (value is ulong))))
dateTimeSqlString = value.ToString();
else if (((value is string) || (value is char)) || (value is Guid))
dateTimeSqlString = EncodeLikeSqlValueString(value.ToString());
else
dateTimeSqlString = null;
if (dateTimeSqlString == null)
return dateTimeSqlString;
if (isLeftLike && isRightLike)
return ("'" + LikeString + dateTimeSqlString + LikeString + "'");
if (isLeftLike)
return ("'" + LikeString + dateTimeSqlString);
return ("'" + dateTimeSqlString + LikeString + "'");
public static string GetSqlValueString(this object value)
return GetSqlValueString(value, null);
public static string GetSqlValueString(this object value, string dateFormat)
if ((value == null) || (value == DBNull.Value))
return "NULL";
if (value is DateTime)
return GetDateTimeSqlString((DateTime)value, dateFormat);
if (value is bool)
if ((bool)value)
return TrueValue.ToString();
return FalseValue.ToString();
if ((((value is decimal) || (value is short)) || ((value is int) || (value is long))) || ((((value is double) || (value is byte)) || ((value is sbyte) || (value is float))) || (((value is ushort) || (value is uint)) || (value is ulong))))
return value.ToString();
if (((value is string) || (value is char)) || (value is Guid))
return ("'" + value.ToString().Replace("'", "''") + "'");
return null;
// <summary>
/// LIKE语句拼接
/// </summary>
/// <param name="value"></param>
/// <returns></returns>
private static string EncodeLikeSqlValueString(this string value)
if (string.IsNullOrEmpty(value))
return "";
value = value.Replace("'", "''");
string[] strArray = new string[] "[", "%", "_", "^" ;
for (int i = 0; i < strArray.Length; i++)
value = value.Replace(strArray[i], "[" + strArray[i] + "]");
return value;
以上是关于sql过滤的主要内容，如果未能解决你的问题，请参考以下文章