public Function RSQL(strChar)
/ i: z; }3 V2 G) v% T# s7 m If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
+ L, X1 E. |! U8 u6 ` Dim strBadChar, arrBadChar, tempChar, I- i! d9 C* ]( o1 y+ {- {+ O
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
, z( B3 Y4 p/ h* ?8 J' P arrBadChar = Split(strBadChar, ",")
# {3 d) W- e) ^' p& T4 h, E tempChar = strChar! ^6 S8 s3 D# v- g
For I = 0 To UBound(arrBadChar)8 C" v+ j9 t3 q A
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
/ _/ o$ w) X2 v) Z1 a8 ~ Next. c" i- b1 [7 J2 |8 M
RSQL = tempChar! k- [2 F4 ` \$ i5 c; t
End Function J9 \: j- n4 ?; E1 f
|