防止sql注入统一验证

static string str = "|add|and|exec|insert|select|delete|update|chr|mid|master|or|truncate|char|declare|join|";
    public static bool DataVerify()
    {
        string type = HttpContext.Current.Request.RequestType.ToLower();
        bool flag = true;
        if (type == "post")
        {
            for (int i = 0; i < HttpContext.Current.Request.Form.Count; i++)
            {
                string value = HttpContext.Current.Request.Form[i].ToString().Trim();
                if (str.Contains("|" + value + "|"))
                {
                    flag = false;
                }
            }
        }
        else if (type == "get")
        {
            for (int i = 0; i < HttpContext.Current.Request.QueryString.Count; i++)
            {
                if (str.Contains("|" + HttpContext.Current.Request.QueryString[i].ToString().Trim() + "|"))
                {
                    flag = false;
                }
            }
        }
        else
        {
            flag = false;
        }
        return flag;
    }