转换成html代码的方法(可用于sql注入)

 protected void Button1_Click(object sender, EventArgs e)
    {
        TextBox2.Text = HtmlEncode(TextBox1.Text);

    }
    public string HtmlEncode(string theString)
    {
        theString = theString.Replace(">", ">");
        theString = theString.Replace("&lt;", "<");
        theString = theString.Replace("&nbsp;", " ");
        theString = theString.Replace("&nbsp;", "　");
        theString = theString.Replace("&quot;", "\"");
        theString = theString.Replace("'", "\'");
        theString = theString.Replace("<br/>   ", "\n");
        return theString;
    }