sqlchecker.java

Email营销是在用户事先许可的前提下

package com.qq.content;

public class SqlChecker {

    public  int check(String sqlWords)
    {
 		
    	if(sqlWords==null) return -1;
		//	if(sqlWords.length()==0) return -1;
    	if( (sqlWords.indexOf(" where ")!=-1)
    		||(sqlWords.indexOf(" or ")!=-1)
    		||(sqlWords.indexOf(" and ")!=-1)
    		||(sqlWords.indexOf("%")!=-1)
    		||(sqlWords.indexOf("like")!=-1)
    		||(sqlWords.indexOf("=")!=-1)
    		||(sqlWords.indexOf("select ")!=-1)
    		||(sqlWords.indexOf("delete ")!=-1)
    		||(sqlWords.indexOf("update ")!=-1)
    		||(sqlWords.indexOf("insert ")!=-1)
    		||(sqlWords.indexOf("drop ")!=-1) 
    		||(sqlWords.indexOf("create ")!=-1)
    		||(sqlWords.indexOf("'")!=-1)
    		||(sqlWords.indexOf("#")!=-1)
    		) return -1;
		return 0;
  	
    }	
	/**
	 * @param args
	 */
	public static void main(String[] args) {
		// TODO Auto-generated method stub

	}

}