Prevents SQL AND htm Injection

# Region prevents token Injection
/// <Summary>
/// Prevents HTML code injection
/// </Summary>
/// <Param name = "NoteContent"> </param>
/// <Returns> </returns>
Public string ExchangeNote (string NoteContent)
{
String afterReContent = "";
AfterReContent = NoteContent. Replace ("<", "& lt"). Replace (">", "& gt ");
Return afterReContent;
}
/// <Summary>
/// Prevents SQL Injection
/// </Summary>
/// <Param name = "inputStr"> explain SQL statement </param>
/// <Returns> sentence after expiration </returns>
Public static string No_SqlHack (string inputStr)
{
// Set of keywords to be deleted
String NoSqlHack_AllStr = "|; | and | chr (| exec | insert | select | delete | from | update | mid (| master. | ";
String SqlHackGet = inputStr;
String [] AllStr = NoSqlHack_AllStr.Split ('| ');

// Subscribe Related Words
String [] GetStr = SqlHackGet. Split ('');
If (SqlHackGet! = "")
{
For (int j = 0; j <GetStr. Length; j ++)
{
For (int I = 0; I <AllStr. Length; I ++)
{
If (GetStr [j]. ToLower () = AllStr [I]. ToLower ())
{
GetStr [j] = "";
Break;
}
}
}
SqlHackGet = "";
For (int I = 0; I <GetStr. Length; I ++)
{
SqlHackGet + = GetStr [I]. ToString () + "";
}
Return SqlHackGet. trimEnd (''). replace ("'","_"). replace (",","_"). replace ("<", "& lt "). replace (">", "& gt ");
}
Else
{
Return "";
}
}
# Endregion