net 防注入replace

/// <summary>          /// 该方法用来检测用户输入是否带有恶意          /// </summary>          /// <param name="text">用户输入的文字</param>          /// <param name="maxlength">最大的长度</param>          /// <returns>返回验证后的文字</returns>          public static string InputText(string text, int maxlength)          {              text = text.ToLower().Trim();              if (string.IsNullOrEmpty(text))                  return string.Empty;              if (text.Length > maxlength)                  text = text.Substring(0, maxlength);
             text = Regex.Replace(text, "[\\s]{2,{", " ");              text = Regex.Replace(text, "(<[b|B][r|R]/*>)+|(<[p|P](.|\\n)*?>)", "\n"); //<br>              text = Regex.Replace(text, "(\\s*&[n|N][b|B][s|S][p|P];\\s*)+", " "); //&nbsp;              text = Regex.Replace(text, "<(.|\\n)*?>", string.Empty); //any other tags              text = Regex.Replace(text,"=", "");              text = Regex.Replace(text, "%", "");              text = Regex.Replace(text, "'", "");              text = Regex.Replace(text, "select", "");              text = Regex.Replace(text, "insert", "");              text = Regex.Replace(text, "delete", "");              text = Regex.Replace(text, "or", "");              text = Regex.Replace(text, "exec", "");              text = Regex.Replace(text, "--", "");              text = Regex.Replace(text, "and", "");              text = Regex.Replace(text, "where", "");              text = Regex.Replace(text, "update", "");              text = Regex.Replace(text, "script", "");              text = Regex.Replace(text, "iframe", "");              text = Regex.Replace(text, "master", "");              text = Regex.Replace(text, "exec", "");              text = Regex.Replace(text, "<", "");              text = Regex.Replace(text, ">", "");              text = Regex.Replace(text, "\r\n", "");
             return text;          }