public DataTable GetIntranet(string key) { // 检查一下key是否含有不合法的字符串 if (SqlInjection.GetString(key)) { return(null); } if (machinesDal == null) { machinesDal = baseDal as IMachines; } return(machinesDal.GetIntranet(key)); }