public Function RSQL(strChar)
0 x, C4 T7 e; D5 w* `2 I, L8 B If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
5 x# P9 \& q6 [9 g' M$ ] Dim strBadChar, arrBadChar, tempChar, I6 _; {1 r6 ]9 M; P
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
$ @4 S g' Y* B7 f arrBadChar = Split(strBadChar, ",")& c( B8 U+ j* V4 g
tempChar = strChar# x+ C* c! r2 B" D l
For I = 0 To UBound(arrBadChar)5 x- l; V, I, O5 o
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空6 T: f+ r0 F: j' R _
Next; ]% n) L% m5 K
RSQL = tempChar
1 r$ k& T! G8 Q( ]: }6 K9 E0 ] w: cEnd Function
( p; m4 X c0 t$ U |