public Function RSQL(strChar)
0 v* V, K2 O8 v If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function8 m' v# q, Z8 L6 ?: ~
Dim strBadChar, arrBadChar, tempChar, I
: x8 Q, p4 B0 w. }9 f strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
: k% A; {% c- p+ f8 ]2 D- @! o arrBadChar = Split(strBadChar, ",")
& z- |) G/ }- o1 V2 V3 C tempChar = strChar
p; a$ R2 E( ?$ ` For I = 0 To UBound(arrBadChar)
v: U: N0 Y8 ]) e$ S tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
1 I: ~2 J& U1 S7 `8 a Next) R% A( i' |" u
RSQL = tempChar6 @% Z' `, f# N
End Function
# K6 Y$ \0 l* N6 ] |