中国网络渗透测试联盟
标题:
对特殊字符的过滤代码
[打印本页]
作者:
admin
时间:
2012-9-15 14:40
标题:
对特殊字符的过滤代码
public Function RSQL(strChar)
; o6 V/ x' j* x
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
2 m0 a8 H3 m) {8 l8 O
Dim strBadChar, arrBadChar, tempChar, I
$ m, U6 [$ ~0 u# Y) |+ K
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
: q( z6 D3 c! ~! Z4 e
arrBadChar = Split(strBadChar, ",")
! e9 O7 m0 U/ U$ D7 d
tempChar = strChar
- f0 @8 C. q% P: L$ {$ y0 C5 D$ A
For I = 0 To UBound(arrBadChar)
6 N& G) W+ j7 q& ], U
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
, }% e `7 M2 n' z x) k& `
Next
2 T. _9 A5 k6 u) ^8 z1 i1 N
RSQL = tempChar
# R6 H( s# }+ U
End Function
+ E- [$ _/ k6 {
欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)
Powered by Discuz! X3.2