Regular Expressions 101

If you want to understand an SQL statement for Hibernate: this replaces the selected fields in an SQL statement generated by Hibernate by a shorthand, since you usually just care about the logic. E.g. it changes select foo0_.bla as bla1_3, foo0_.bar as bar1_3, foo0_.baz1_3 as baz1_3 from ... to sele...

insert into (a,b,c) values (1,2.3,"test");

this regex detect any sql injections .

but it does not work. How do I make it work? It will be used in C#

SQL injection regEx pattern

Matches european dates (DD.MM.YYYY[ HH:MM:SS]) and MS-SQL Timestamp ({ts 'YYYY-MM-DD HH:MM:SS'})

Splits t-sql script into separated commands. useful for executing with adocommand object

Useful for when you need to convert a T-SQL MSSMS Server batch into individual SQL requests by removing the GO between them. e.g. Dim SQLBatches As String() = Regex.Split(text, "(?:\s|\r|\n)+GO\s*(?:\r|\n)", RegexOptions.IgnoreCase)

13 fields, 12 comma's from right (all left hand ones need to be ignored as they're part of the sql statements)

insert[\s]+into[\s]+\([\s](?.?)[\s]\)[\s]+values[\s]+\((?.?)[\s]*\);

insert into table ( a, b, c ) values ( " insert into values (1,2,3)",1,2.3,"a,b" ); insert into table (ee,bb,cc) values (aa,234,"asj",2.3);

A regex to find the db wich you're quering against to.