formatstring.cs

来自「该系统是留言版系统」· CS 代码 · 共 38 行

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;

namespace LeaveMessageMVC.MVC.BusinessLogicLayer.SomeFunctions
{
    /// <summary>
    /// 
    /// </summary>
    public static class FormatString
    {
        /// <summary>
        /// 用以对用户输入的文本进行过滤，使可能出现的HTML标记失效，并转化一些操作符
        /// （* 结合在Web.config中设置pages validateRequest="false"）
        /// </summary>
        /// <param name="oldStr">传入欲过滤的字符串</param>
        /// <returns>返回已经过滤了的字符串</returns>
        public static String FormatStr(string oldStr)
        {
            string FormattedStr = oldStr;

            FormattedStr = FormattedStr.Replace("<", "&lt;");
            FormattedStr = FormattedStr.Replace(">", "&gt;");
            FormattedStr = FormattedStr.Replace("\r\n", "<br>");                  //转化回车符
            FormattedStr = FormattedStr.Replace("\t", "&nbsp;&nbsp;&nbsp;");      //转化Tab符为3个空格
            FormattedStr = FormattedStr.Replace(" ", "&nbsp;");                   //转化空格
            FormattedStr = FormattedStr.Replace("'", "''");                       //转化单引号，避免与SQL语句的冲突

            return FormattedStr;
        }
    }
}