public Function RSQL(strChar)) _, `! z' t! {% J
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function L- I$ ^: O- q' N" h
Dim strBadChar, arrBadChar, tempChar, I
5 J& J* p$ t5 m* x% G strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
+ Q' l' p( w3 @* x arrBadChar = Split(strBadChar, ",") R" @, A& u' O8 p) H* S( y: i0 ]
tempChar = strChar
% u' a% u: M) r; z) F, _6 K For I = 0 To UBound(arrBadChar); ~$ `9 m* B2 X4 a! \
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空) _ M/ r& p. @( B" r$ Q# B
Next+ T7 d# ?3 g2 y
RSQL = tempChar
" Y# q3 _3 ~* R' ~! ~ qEnd Function8 u' h' s3 E, K
|