ASP.NET防SQL注入脚本程序

public class SqlCheck  
{  
    public SqlCheck()  
    {  
        //  
        // TODO: 在此处添加构造函数逻辑  
        //     
    }  
 
      
    public SqlConnection oconn()  
    {  
        SqlConnection conn = new SqlConnection();  
        conn.ConnectionString = ConfigurationManager.ConnectionStrings["StudyConnectionString"].ToString();  
        //第1种调用的方法   JK1986_CheckSql();  
        JK1986_CheckSql();  
        if ( conn.State == ConnectionState.Closed  )   
        {  
            conn.Open();  
        }  
        return conn;  
    }  
 
 
    public DataTable  getsource(string getds)   
    {  
        SqlConnection conn = oconn();  
        SqlDataAdapter da = new SqlDataAdapter(getds, conn);  
        DataSet ds = new DataSet();  
        da.Fill(ds,"news" );  
        return ds.Tables["news"];