传参防SQL注入函数

        bool CheckParams(string args)
        {
            string[] Lawlesses ={ "'", "xp_cmdshell", "net user", "exec", "insert", "select", "delete", "update", "count", "master", "truncate", "char", "declare" };
            for (int i = 0; i < Lawlesses.Length; i++)
            {
                Regex r = new Regex(Lawlesses[i]);
                Match m = r.Match(args);
                if (m.Success)
                    return false;
            }
            return true;
        }