/// <summary>
/// SQL注入处理
/// </summary>
/// <param name="rowFilter"></param>
/// <returns></returns>
public static string DtRowFilter(string rowFilter)
{
return rowFilter.Replace("\‘", "‘‘");
}
原文：http://www.cnblogs.com/vincentvoid/p/5908256.html