MVC 记录操作日志与过滤特殊字符

最近进行的MVC系统需要用到记录操作日志和过滤特殊字符的功能，如果每个action中都调用记录日志的方法就太麻烦了，所以根据需要结合mvc的过滤机制

写了个特殊字符验证与记录操作日志的公用类：

 public class CustomFilterAttribute : ActionFilterAttribute
    {
        public CustomFilterAttribute()
        {
            IsLog = false;
            FilterSpecialChar = true;
        }

        /// <summary>
        /// 是否记录日志
        /// </summary>
        public bool IsLog { get; set; }

        /// <summary>
        /// 是否过滤特殊字符
        /// </summary>
        public bool FilterSpecialChar { get; set; }

        /// <summary>
        /// 登录用户
        /// </summary>
        public string UserName { get; set; }

        /// <summary>
        /// 操作简介
        /// </summary>
        public string Message { get; set; }

        /// <summary>
        /// action执行前特殊字符过滤
        /// </summary>
        /// <param name="filterContext"></param>
        public override void OnActionExecuting(ActionExecutingContext filterContext)
        {
            base.OnActionExecuting(filterContext);

            if (filterContext.ActionParameters.Count > 0)
            {
                if (filterContext.HttpContext.Request.IsAjaxRequest())
                {
                    if (IsContainSpecialChar(filterContext.ActionParameters))
                    {
                        var json = new JsonResult();
                        json.Data = new { status = false, msg = "您输入的数据中包含特殊字符。" };
                        json.JsonRequestBehavior = JsonRequestBehavior.AllowGet;
                        filterContext.Result = json;
                    }
                }
                else if (IsContainSpecialChar(filterContext.ActionParameters))
                {
                    var ReturnUrl = "/Login/Index";
                    filterContext.Result = new RedirectResult(ReturnUrl);
                }
            }

            return;
        }

        /// <summary>
        /// action执行后记录日志
        /// </summary>
        /// <param name="filterContext"></param>
        public override void OnActionExecuted(ActionExecutedContext filterContext)
        {
            base.OnActionExecuted(filterContext);
            if (this.IsLog)
            {
                var ActionName = filterContext.ActionDescriptor.ActionName;
                var Url = "/" + filterContext.ActionDescriptor.ControllerDescriptor.ControllerName + "/" + ActionName;

                //var loginInfo = (ViewModel.t_User_VModel)filterContext.HttpContext.Session["userMdl"];
                string OperateIP = HttpContext.Current.Request.UserHostAddress;

                //登录用户
                //if (loginInfo != null)
                //{
                //    this.UserName = loginInfo.UserName;
                //}
                this.UserName = "测试";
                Message = filterContext.Exception == null ? "成功" : "失败" + Message;

                new JiaSoftOTOSystem.BLL.OperateLog_BLL().AddOprateLog(UserName, OperateIP, Url, ActionName, Message);
            }
        }

        //public override void OnResultExecuting(ResultExecutingContext filterContext)
        //{
        //    base.OnResultExecuting(filterContext);
        //    //filterContext.HttpContext.Response.Write("返回Result之前" + Message + "<br />");
        //}

        //public override void OnResultExecuted(ResultExecutedContext filterContext)
        //{
        //    base.OnResultExecuted(filterContext);
        //    //filterContext.HttpContext.Response.Write("返回Result之后" + Message + "<br />");
        //}

        /// <summary>
        /// 验证string类型参数中是否含有特殊字符  
        /// </summary>
        /// <param name="paramters"></param>
        /// <returns>有：true，没有：false</returns>
        public bool IsContainSpecialChar(IDictionary<string, object> paramters)
        {
            bool bResult = false;
            System.Text.StringBuilder strParam = new System.Text.StringBuilder();
            foreach (var item in paramters)
            {
                if (item.Value != null)
                {
                    Type types = item.Value.GetType();
                    if (types.Name.EndsWith("Model"))
                    {
                        System.Reflection.PropertyInfo[] ps = types.GetProperties();
                        foreach (PropertyInfo pi in ps)
                        {
                            object value = pi.GetValue(item.Value, null);//用pi.GetValue获得值
                            string name = pi.Name;//获得属性的名字,后面就可以根据名字判断来进行些自己想要的操作
                            //获得属性的类型,进行判断然后进行以后的操作,例如判断获得的属性是整数
                            if (value != null && value.ToString().Length > 0)
                            {
                                if (value.GetType() == typeof(string))
                                {
                                    if (FilterSpecialChar && !bResult && Regex.IsMatch(value.ToString(), @"[~<>$%^+&\/?|:{}()';=]"))
                                    {
                                        bResult = true;
                                        strParam.Append(name + "=" + value.ToString().Replace("'", "‘").Replace(""", "").Replace("&", "&amp").Replace("<", "&lt").Replace(">", "&gt") + "|");
                                    }
                                    else if (IsLog)
                                    {
                                        strParam.Append(name + "=" + value + "|");
                                    }
                                }
                                else if (IsLog && item.Value.GetType() == typeof(Guid) && item.Value.ToString() != Guid.Empty.ToString())
                                {
                                    strParam.Append(name + "=" + value + "|");
                                }
                                else if (IsLog && (item.Value.GetType() == typeof(int) || item.Value.GetType() == typeof(decimal)) && item.Value.ToString() != "0")
                                {
                                    strParam.Append(name + "=" + value + "|");
                                }
                                else if (IsLog)
                                {
                                    strParam.Append(name + "=" + value + "|");
                                }
                            }
                        }
                    }
                    else if (item.Value != null && item.Value.ToString().Length > 0)
                    {
                        if (item.Value.GetType() == typeof(string))
                        {
                            if (FilterSpecialChar && !bResult && Regex.IsMatch(item.Value.ToString(), @"[~<>$%^+&\/?|:{}()';=]"))
                            {
                                bResult = true;
                                strParam.Append(item.Key + "=" + item.Value.ToString().Replace("'", "‘").Replace(""", "").Replace("&", "&amp").Replace("<", "&lt").Replace(">", "&gt") + "|");
                            }
                            else if (IsLog)
                            {
                                strParam.Append(item.Key + "=" + item.Value + "|");
                            }
                        }
                        else if (IsLog && item.Value.GetType() == typeof(Guid) && item.Value.ToString() != Guid.Empty.ToString())
                        {
                            strParam.Append(item.Key + "=" + item.Value + "|");
                        }
                        else if (IsLog && (item.Value.GetType() == typeof(int) || item.Value.GetType() == typeof(decimal)) && item.Value.ToString() != "0")
                        {
                            strParam.Append(item.Key + "=" + item.Value + "|");
                        }
                        else if (IsLog)
                        {
                            strParam.Append(item.Key + "=" + item.Value + "|");
                        }
                    }
                }
            }

            this.Message = "。参数：" + strParam.ToString();

            return false;
        }

    }

调用方式如下：

验证结果：如果包含特殊字符：如果是ajax请求则返回json，否则返回到错误页。