C# 過濾SQL 字符串中的 參數

       /// <summary>
        /// 參數過濾
        /// </summary>
        /// <param name="parameters"></param>
        /// <param name="sql"></param>
        /// <returns></returns>

        public static IEnumerable<PropertyInfo> FilterParameters(IEnumerable<PropertyInfo> parameters, string sql)
        {
            return parameters.Where(p => Regex.IsMatch(sql, @"[?@:]" + p.Name + "([^a-z0-9_]+|$)", RegexOptions.IgnoreCase | RegexOptions.Multiline | RegexOptions.CultureInvariant));
            
        }