public Function RSQL(strChar)
7 P8 n4 x5 Z$ M5 |) f9 _1 { If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function* G; j6 }7 r( U% S# ~8 [& ?$ d
Dim strBadChar, arrBadChar, tempChar, I- ?6 ^. Q. n/ K+ i' f: R; e) [, t
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的006 f+ T: `, ?) I5 N* z! \
arrBadChar = Split(strBadChar, ",")& K& U3 r. \" M1 g" f/ }( B
tempChar = strChar! Z, q$ c( _. e0 G% ]- d
For I = 0 To UBound(arrBadChar)
6 D3 Z3 G% m: p' b: C* }& g( z6 C tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空# ~6 f) n- e2 H9 [3 j( H4 n
Next: h5 n" e1 M/ v2 z
RSQL = tempChar
. A( {" V1 |( J: l7 vEnd Function$ m8 M+ R7 I* L' D x) {+ ?- @
|
发表于 2012-9-15 14:40:40
收藏
支持
反对