sql Injection

#region Anti-SQL Injection Attack
        /// <summary>
        /// 匹配字符串sWord,若含有注入代碼,則返回True,否則返回False
        /// </summary>
        /// <param name="sWord">需要檢測的內容</param>
        /// <returns>布爾值</returns>
        public bool SqlInjectionRegex(string sWord)
        {
            sWord = sWord.ToLower();
            string sPattern = @"(/')|(/;)|(drop)|(delete)|(update)|(insert)|(create)|(declare)|(exec)|(count)|(chr)|(mid)|(master)|(truncate)|(char)|(cast)|(db_name)|(db_owner)|(sysobjects)|(///*)";
            bool flag = Regex.IsMatch(sWord, sPattern, RegexOptions.IgnoreCase);
            return flag;
        }
        #endregion