Prevent malicious user input

The following describes the functions and can be referenced directly.

/// <Summary>

/// This method is used to confirm that user input is not malicious information

/// </Summary>

/// <Param name = "text"> User input information </param>

/// <Param name = "maxlength"> maximum input length </param>

Public static string inputtext (string text, int maxlength)

{

TEXT = text. Trim ();

If (string. isnullorempty (text ))

Return string. empty;

If (text. length> maxlength)

TEXT = text. substring (0, maxlength );

// Replace illegal and offensive symbols on the webpage to prevent SQL injection! Return normal data

TEXT = RegEx. Replace (text, "[\ s] {2,}", ""); // two or more spaces

TEXT = RegEx. replace (text, "(<[B | B] [R | r]/*>) + | (<[p | p] (. | \ n) *?>) "," \ N "); // <br> HTML line break

TEXT = RegEx. replace (text, "(\ s * & [n | n] [B | B] [S | S] [p | p]; \ s *) + ", ""); // & nbsp; html space character

TEXT = RegEx. Replace (text, "<(. | \ n) *?> ", String. Empty); // any other tag

TEXT = text. Replace ("'", "'' "); // single quotes

Return text;

}