class="brush:csharp;gutter:true;">/// <summary> /// 从URL获取值(字符串) /// </summary> public static string GetValueFromUrl(string key) { string keyvalue = HttpContext.Current.Request.QueryString[key]; if (keyvalue != null) { keyvalue = KillBadString(keyvalue); return keyvalue; } return ""; } /// <summary> /// 从URL获取值(整型) /// </summary> /// <param name="key"></param> /// <returns></returns> public static int GetIntValueFromUrl(string key) { string keyvalue = HttpContext.Current.Request.QueryString[key]; int result = 0; if (int.TryParse(keyvalue, out result)) { return result; } return result; } /// <summary> /// 过滤SQL敏感字符 /// </summary> /// <param name="str"></param> /// <returns></returns> public static string KillBadString(string str) { if (str == null || str.Length == 0) { return ""; } str = System.Text.RegularExpressions.Regex.Replace(str, "'", "''"); return str; }