中国网络渗透测试联盟
标题:
对特殊字符的过滤代码
[打印本页]
作者:
admin
时间:
2012-9-15 14:40
标题:
对特殊字符的过滤代码
public Function RSQL(strChar)
6 t8 e. ~" o5 y5 f8 N. k
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
2 v3 m; ^+ E. Y+ L" D9 P
Dim strBadChar, arrBadChar, tempChar, I
8 y5 f- ~0 L a! U# K5 v( Q w; ^
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
% [8 T& \) y8 C+ O4 f1 H
arrBadChar = Split(strBadChar, ",")
- S9 f2 S2 S- ?
tempChar = strChar
' I4 f9 @" H2 I/ U' T0 v V
For I = 0 To UBound(arrBadChar)
- J5 D4 @5 I) N, g: E+ _9 l
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
* b# ~ V6 x9 h; J) ?8 q5 t3 w
Next
3 D, b& Q+ B* }
RSQL = tempChar
9 @8 k2 C' {/ Q) S
End Function
1 E, m1 `: H) N6 [" l: D
欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)
Powered by Discuz! X3.2