处理SQL注入的“ ‘ ”问题！

 1 /// <summary>
 2 /// 检查参数是否含有"'"
 3 /// </summary>
 4 /// <param name="value">参数</param>
 5 /// <returns>安全的参数</returns>
 6 public string SqlSafe(string value)
 7 {
 8     value = value.Replace("'", "''");
 9     return value;
10 }

 1 /// <summary>
 2 /// 检查参数是否含有"'"
 3 /// </summary>
 4 /// <param name="value">参数</param>
 5 /// <returns>安全的参数</returns>
 6 public string SqlSafe(string value)
 7 {
 8     value = value.Replace("'", "");
 9     return value;
10 }