???? strReturn= sql.replaceAll("(&)|(\\^)|(')|(/)|(;)|(:)|(_)|(%)|(\")|(\n)|(\\*)|(\\+)|(\\[)|(\\])|(\\})|(\\{)|(\\n)|(\\|)","");
?public static String dealSql(String sql){
??????? String strReturn="";
??????? if (sql==null)
??????????? strReturn="";
??????? else{
??????????? try{
??????? strReturn= sql.replaceAll("(&)|(\\^)|(')|(/)|(;)|(:)|(_)|(%)|(\")|(\n)|(\\*)|(\\+)|(\\[)|(\\])|(\\})|(\\{)|(\\n)|(\\|)","");
??????????? }catch(Exception e){
??????????????? System.out.println(e.toString());
??????????????? strReturn="";
??????????? }
??????? }
??????? return strReturn;
??? }
大盤預測
國富論