public Function RSQL(strChar). Z, _8 Q* e! `- E
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function3 u5 ?! h; `, l- F& H+ V: {' {
Dim strBadChar, arrBadChar, tempChar, I
5 R. x! Z d1 Y) ~, @1 u strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
) {3 U+ w! C+ S1 f# [ arrBadChar = Split(strBadChar, ",")
& o8 ~6 d6 x Y- h y# S# x x tempChar = strChar
9 e8 x; P( A0 h" t0 N For I = 0 To UBound(arrBadChar)
- F0 Y( l" }* } tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空6 Z8 b& g6 Q. J
Next
* H# b# Y' V$ @/ g4 y RSQL = tempChar
7 z! [+ e. o: D) @End Function
6 V% _# w5 B. n" L/ I7 }# o9 w! j |