Asp.net anti-SQL injection string processing method and MD5 encryption method for important information

Public static bool convertsql (string Str)
{
String [] checkstr = new string [] {"select", "insert", "delete from", "Count (", "Drop table", "Update ", "truncate", "ASC (", "mid (", "char (", "xp_mongoshell", "Exec master", "net localgroup Administrators", "and ", "net user", "or ","'"};
Bool result = true;
Foreach (string temp in checkstr)
{
If (Str. tolower (). indexof (temp )! =-1)
{
Result = false;
}

}

Return result;
}

 

Private Static string convert (string Str)
{
Md5cryptoserviceprovider MD5 = new md5cryptoserviceprovider ();
Return bitconverter. tostring (md5.computehash (encoding. getencoding ("gb2312"). getbytes (STR). Replace ("-","");
}
Public static string getmd5hash (string Str)
{
String temp = convert (STR). substring (8, 16). tolower ();
Return convert (temp). substring (8, 16). tolower ();
}