public Function RSQL(strChar)
\: Y. w( d% k. S- g1 d" z If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
! w3 ^2 G7 v$ C( m. y5 _' l* R$ ] Dim strBadChar, arrBadChar, tempChar, I
2 Q+ @4 c7 d4 I [" U1 c+ e strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00, {4 _; c+ M0 b5 }' m: O3 n
arrBadChar = Split(strBadChar, ",")" f' o2 I; v" X) I
tempChar = strChar
$ w* b6 C/ {/ J9 w+ D. Z0 V: u0 U For I = 0 To UBound(arrBadChar) K& N9 O. G9 f! ~: \1 w! L# H
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空0 y8 D1 D6 `) g1 Q' y1 n) J$ ?
Next
: Y/ }( Z J9 F# E. S RSQL = tempChar
* m& U6 D: Q7 j7 cEnd Function
$ V1 ~! v1 w& m. ] |