/// <summary>/// 將傳入的字符串中間部分字符替換成特殊字符/// </summary>/// <param name="value">需要替換的字符串</param>/// <param name="startLen">前保留長度</param>/// <param name="endLen">尾保留長度</param>/// <param name="replaceChar">特殊字符</param>/// <returns>被特殊字符替換的字符串</returns>private static string ReplaceWithSpecialChar(string value, int startLen = 4, int endLen = 4, char specialChar = '*'){ try {  int lenth = value.Length - startLen - endLen;  string replaceStr = value.Substring(startLen, lenth);  string specialStr = string.Empty;  for (int i = 0; i < replaceStr.Length; i++)  {   specialStr += specialChar;  }  value = value.Replace(replaceStr, specialStr); } catch (Exception) {  throw; } return value;}

using System;using System.Collections;using System.ComponentModel;using System.Drawing;using System.Web;using System.Web.SessionState;using System.Web.UI;using System.Web.UI.WebControls;using System.Web.UI.HtmlControls;using System.IO;using System.Text;using System.Text.RegularExpressions;using System.Data.SqlClient;using System.Configuration;//導入自定義的類庫using _3Layer.DataLayer.DataCommon;using _3Layer.DataLayer.DataCommon.DataAccess;using Library.ClassLibrary.Crypt.DES;namespace CHONGCHONG.XMLpublic class RenderingXML : System.Web.UI.Page{/// <summary>/// 從數據庫預生成XML數據源/// </summary>private void PreRenderXML(){string strSQL = "select語句略去........................;myDataLayer.Open();RenderingXml="<?xml version='1.0' encoding='gb2312'?>/r/n";RenderingXml+="<xml>/r/n";try{ System.Data.SqlClient.SqlDataReader myDR = (SqlDataReader)myDataLayer.ExecuteReader( strSQL );while(myDR.Read()){RenderingXml+="<TreeNode id='"+myDR["BoardID"]+"'>/r/n";RenderingXml+="<NodeText>"+myDR["BoardName"]+"</NodeText>/r/n";RenderingXml+="<title>"+myDR["Title"]+"</title>/r/n";RenderingXml+="<NodeUrl>"+EncodeHTML( EncodeParameter( myDR["Link"].ToString() ) )+"</NodeUrl>/r/n";RenderingXml+="<child>"+myDR["children"]+"</child>/r/n";RenderingXml+="<target>"+myDR["Target"]+"</target>/r/n";RenderingXml+="</TreeNode>/r/n";}}catch(System.Data.SqlClient.SqlException ee){return ;}finally{myDataLayer.Close() ; }RenderingXml+="</xml>";byte[] bytResult = Encoding.Default.GetBytes( RenderingXml ) ;Response.ContentType = "text/xml" ;Response.BinaryWrite( bytResult ) ;} /// <summary>/// Description:加密路徑參數/// </summary>/// <param name="sourParameter"></param>/// <returns></returns>private string EncodeParameter( string sourParameter ){string startString = String.Empty ;string endString = String.Empty ; StringBuilder destParameter = new StringBuilder() ;if( sourParameter == null || sourParameter.Equals("") ){destParameter.Append( String.Empty ).ToString() ;}else{//開始分析路徑里的?字符if( sourParameter.IndexOf("?")<0 ){destParameter.Append( sourParameter ).ToString() ;}else{//以?號分割路徑string[] paramPath = sourParameter.Split( new char[]{'?'} ) ;startString = paramPath[0].ToString() ;endString = paramPath[1].ToString() ;//開始分析路徑里的&字符if(sourParameter.IndexOf("&")<0){//只有一個參數,用=號分割,直接把NameValue進行Des加密string[] paramNameValue = endString.Split( new char[]{'='} ) ;string paramName = myDES.Encrypt( paramNameValue[0].ToString() ,myDESKey ) ;string paramValue = myDES.Encrypt( paramNameValue[1].ToString() ,myDESKey ) ;destParameter.Append( startString ).Append("?").Append( paramName ).Append("=").Append( paramValue ) ;}else{//有多個參數,以&號分割?號后面的路徑string[] paramJoin = endString.Split( new char[]{'&'} ) ;destParameter.Append( startString ).Append("?").Append( EncoderNameValue( paramJoin ) ) .ToString() ;}}}return destParameter.ToString() ;} /// <summary>/// Description:加密路徑里的NameValue參數/// </summary>/// <param name="sourNameValue"></param>/// <returns></returns>private string EncoderNameValue( string[] sourNameValue ){string[] paramNameValue ;string paramName ;string paramValue ;StringBuilder sb = new StringBuilder() ;for( int i = 0 ; i <= sourNameValue.Length-1 ; i++ ){//以＝號分割每個NameValue參數paramNameValue = sourNameValue[i].Split( new char[]{'='} ) ;//開始對NameValue加密paramName = myDES.Encrypt( paramNameValue[0].ToString() ,myDESKey ) ;paramValue = myDES.Encrypt( paramNameValue[1].ToString() ,myDESKey ) ;//存儲加密后的路徑字符串sb.Append( paramName ).Append("=").Append( paramValue ) ;//是否最后一個NameValue參數，若不是在路基里添加&參數連接符if( i<sourNameValue.Length ){sb.Append("&") ;}}return sb.ToString() ;}}