中国网络渗透测试联盟
标题:
对特殊字符的过滤代码
[打印本页]
作者:
admin
时间:
2012-9-15 14:40
标题:
对特殊字符的过滤代码
public Function RSQL(strChar)
7 e" r# j' F" s+ k" k
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
% k4 `' P) z$ H" Z: |" M
Dim strBadChar, arrBadChar, tempChar, I
+ p: H" W3 N4 L0 z2 i
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
& J) E! _/ L0 r% B( m+ d: [+ W. ^
arrBadChar = Split(strBadChar, ",")
: ^9 c0 }5 a# b) u- M7 U. \! }
tempChar = strChar
) ?. y, d; W- c4 Z2 J0 ~1 H
For I = 0 To UBound(arrBadChar)
5 F$ n ^) W, a5 @8 n3 g1 u
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
) j$ k/ v* {1 B9 O/ h- N
Next
& d: E! H" `" t& S1 U4 p" q
RSQL = tempChar
- [$ {3 X" x# O, o7 d/ u1 }
End Function
q0 U/ \. b6 k8 {3 _ Q. h
欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)
Powered by Discuz! X3.2