中国网络渗透测试联盟
标题:
对特殊字符的过滤代码
[打印本页]
作者:
admin
时间:
2012-9-15 14:40
标题:
对特殊字符的过滤代码
public Function RSQL(strChar)
) M) i, n# T! i# w$ {. N
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
% w/ s) A& c- q2 b6 N
Dim strBadChar, arrBadChar, tempChar, I
m9 B8 G. r0 f/ K4 L, G6 K: \
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
2 z- b# r7 Z' r8 F! y& x1 ?/ c* p
arrBadChar = Split(strBadChar, ",")
2 Z( D: r/ ?9 W! x7 e t$ a5 X' O! s
tempChar = strChar
( [4 T) G0 P& ~: E0 N( | n1 [- u" f
For I = 0 To UBound(arrBadChar)
3 G9 R) B8 M% V+ Q' Z6 l$ [9 N0 T1 V
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
6 V6 S% q1 L. c0 b3 w
Next
* b$ |( a, L6 J- H" D
RSQL = tempChar
1 o9 s% J' W! T8 a4 ] p9 ^* z j
End Function
) l2 n, {+ B; V: ~1 k2 H f! f
欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)
Powered by Discuz! X3.2