Digital Forensics in Small Devices: RFID Tag Investigation

private void insertTagtoDB(string Tag, string TagValue, DateTime
currentTime)
{
string ctime;
ctime = currentTime.ToString("yyyy-MM-dd HH:mm:ss");
string strsql = "Insert into rfid_db (Tag, Value, Date) values('" + Tag + "','"
+ TagValue + "', '" + ctime + "');";
}
//mysql_real_escape_string(strsql);
string strsql2 = strsql;
strsql2 = strsql2.Replace("'", " ");
strsql2 = strsql2.Replace(";", " ");
strsql2 = strsql2.Replace(",", " ");
strsql2 = strsql2.Replace("(", " ");
strsql2 = strsql2.Replace(")", " ");
//MessageBox.Show(strsql);
insertLogtoDB(Tag, strsql2, ctime);
Con = new SqlConnection(constr);
Con.Open();
SqlCommand sqlCmd = new SqlCommand(strsql, Con);
sqlCmd.ExecuteNonQuery();
Con.Close();
private void insertLogtoDB(string logItem, string userdata, string logdate)
{
Con = new SqlConnection(constr);
Con.Open();
string strSql = "Insert into rfid_log (Tag, User_data, Date) values('" +
logItem + "', '" + userdata + "', '" + logdate + "');";
//MessageBox.Show(strSql);
SqlCommand sqlCmd = new SqlCommand(strSql, Con);
sqlCmd.ExecuteNonQuery();
49