public final static String filterSQLInjection(String s) {
if (s == null || "".equals(s)) {
return "";
}
try {
s = s.trim().replaceAll("?[s,S][c,C][r,R][i,I][p,P][t,T]>?", "");//script
s = s.trim().replaceAll("[a,A][l,L][e,E][r,R][t,T]\(", "").replace(""", "");// alert
s = s.trim().replace("\.swf", "").replaceAll("\.htc", "");
s = s.trim().replace("\.php\b", "").replaceAll("\.asp\b", "");
s = s.trim().replace("document\.", "").replaceAll("[e,E][v,V][a,A][l,L]\(", "");
s = s.trim().replaceAll("'", "").replaceAll(">", "");
s = s.trim().replaceAll("
Java免费学习笔记:立即使用
解锁 Java 大师之旅:从入门到精通的终极指南










