common.cs

Asp.net在线WEB文件管理,以及通过WebService在线搜索文件

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Text;

/// <summary>
/// Common 的摘要说明
/// </summary>
public class Common
{
	public Common()
	{
		//
		// TODO: 在此处添加构造函数逻辑
		//
	}

    public static string InputText(string inputString, int maxLength)
    { //过滤JAVA脚本和html 
        System.Text.RegularExpressions.Regex regex1 = new System.Text.RegularExpressions.Regex(@"<script[/s/S]+</script *>", System.Text.RegularExpressions.RegexOptions.IgnoreCase);
        System.Text.RegularExpressions.Regex regex2 = new System.Text.RegularExpressions.Regex(@" href *= *[/s/S]*script *:", System.Text.RegularExpressions.RegexOptions.IgnoreCase);
        System.Text.RegularExpressions.Regex regex3 = new System.Text.RegularExpressions.Regex(@" on[/s/S]*=", System.Text.RegularExpressions.RegexOptions.IgnoreCase);
        System.Text.RegularExpressions.Regex regex4 = new System.Text.RegularExpressions.Regex(@"<iframe[/s/S]+</iframe *>", System.Text.RegularExpressions.RegexOptions.IgnoreCase);
        System.Text.RegularExpressions.Regex regex5 = new System.Text.RegularExpressions.Regex(@"<frameset[/s/S]+</frameset *>", System.Text.RegularExpressions.RegexOptions.IgnoreCase);
        inputString = regex1.Replace(inputString, ""); //过滤<script></script>标记  
        inputString = regex2.Replace(inputString, ""); //过滤href="/u/javascript: ";(<A>) 属性  
        inputString = regex3.Replace(inputString, " _disibledevent="); //过滤其它控件的on...事件  
        inputString = regex4.Replace(inputString, ""); //过滤iframe  
        inputString = regex5.Replace(inputString, ""); //过滤frameset  
        //过滤危险字符。。。。 
        StringBuilder retVal = new StringBuilder();
        if ((inputString != null) && (inputString != String.Empty))
        {
            inputString = inputString.Trim();
            if (inputString.Length > maxLength)
            {
                inputString = inputString.Substring(0, maxLength);
            }
            for (int i = 0; i < inputString.Length; i++)
            {
                switch (inputString)
                {
                    case "%":
                        retVal.Append("");
                        break;
                    case "/":
                        retVal.Append("");
                        break;
                    case "*":
                        retVal.Append("");
                        break;
                    case "-":
                        retVal.Append("");
                        break;
                    case "\"":
                        retVal.Append("&quot;");
                        break;
                    case "<":
                        retVal.Append("&lt;");
                        break;
                    case ">":
                        retVal.Append("&gt;");
                        break;
                    default:
                        retVal.Append(inputString);
                        break;
                }
            }

            // Replace single quotes with white space 
            retVal.Replace("'", " ");
        }
        return retVal.ToString();
    } 
}