public Function RSQL(strChar)
1 f/ l. ]' D1 H; w If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function% M) o& v) z7 V; D) Z) S7 w4 k4 {
Dim strBadChar, arrBadChar, tempChar, I
. }) N$ M0 m9 ^: c1 U strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00: ~8 X( ^5 Q- O
arrBadChar = Split(strBadChar, ","); Y X8 h0 ~0 R+ h0 ?
tempChar = strChar' w3 I! ?+ n( i+ y, o9 A2 l
For I = 0 To UBound(arrBadChar)
2 M: u4 T" R" U+ }5 T3 ?: E tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
8 ?8 a* B' H9 b; w s Next- I; m, }5 r3 Z' `8 s9 |1 i; J/ M
RSQL = tempChar d5 K7 W5 ^9 c( A, g
End Function
' D7 h) ?4 R' ~ A& U' ^$ r |