c#验证密码强度及有效性（可防sql注入）

  /// <summary>
       /// 验证是否为有效密码
       /// </summary>
       /// <param name="password"></param>
       /// <returns></returns>
        public static bool IsValidPassword(string password)
        {
            try
            {
                return Regex.IsMatch(password,
                                @"[-\da-zA-Z`=\\\[\];',./~!@#$%^&*()_+|{}:<>?]*(" +
                                @"(\d+[a-zA-Z]+[-`=\\\[\];',./~!@#$%^&*()_+|{}:<>?]+)" +
                                @"|(\d+[-`=\\\[\];',./~!@#$%^&*()_+|{}:<>?]+[a-zA-Z]+)" +
                                @"|([a-zA-Z]+\d+[-`=\\\[\];',./~!@#$%^&*()_+|{}:<>?]+)" +
                                @"|([a-zA-Z]+[-`=\\\[\];',./~!@#$%^&*()_+|{}:<>?]+\d+)" +
                                @"|([-`=\\\[\];',./~!@#$%^&*()_+|{}:<>?]+\d+[a-zA-Z]+)" +
                                @"|([-`=\\\[\];',./~!@#$%^&*()_+|{}:<>?]+[a-zA-Z]+\d+))" +
                                @"[-\da-zA-Z`=\\\[\];',./~!@#$%^&*()_+|{}:<>?]*",
                      RegexOptions.IgnoreCase, TimeSpan.FromMilliseconds(250));
            }
            catch (RegexMatchTimeoutException)
            {
                return false;
            }

        }