中国网络渗透测试联盟
标题:
对特殊字符的过滤代码
[打印本页]
作者:
admin
时间:
2012-9-15 14:40
标题:
对特殊字符的过滤代码
public Function RSQL(strChar)
: f: @$ ^! N. F2 R5 L
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
0 a0 }5 h) F# m" L' ]
Dim strBadChar, arrBadChar, tempChar, I
( D z+ n" Z; d2 g w# M
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
' ]/ D3 s5 u6 o- }3 ?7 |* c$ \
arrBadChar = Split(strBadChar, ",")
/ k6 x/ B( _+ ]7 y/ w/ x5 q% l6 j: Y
tempChar = strChar
4 A/ j9 |% I4 c
For I = 0 To UBound(arrBadChar)
6 i- @ e5 d# w# ?0 l
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
: P3 Z/ ^7 @1 o' k& r! c
Next
' N+ H% L) ~: h% A
RSQL = tempChar
# e* x. L% Z L6 a |# I K
End Function
8 p4 o! w5 \ A& R& e$ A) `
欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)
Powered by Discuz! X3.2