public Function RSQL(strChar)
" v% u7 l: O* A" O5 D If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
. f$ c+ G) K& @% Y1 ?, e Dim strBadChar, arrBadChar, tempChar, I
: ^( P H$ s! e2 v4 S! I ~* v# A2 s* W strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
# t- u) @2 d9 g arrBadChar = Split(strBadChar, ",")
; X+ S; W, j% Z) N4 Y tempChar = strChar
# z# h. S+ E" @! O' h% i: G For I = 0 To UBound(arrBadChar)
5 p0 m: U4 {3 [8 | tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
! l' E7 @5 N; f- B+ L Next: V: P& P& m8 s6 N
RSQL = tempChar4 e3 U8 @% g5 A" E1 T
End Function% C1 u* Q! g' U/ v' \8 E
|