public Function RSQL(strChar)& ]$ r+ O( o" Z
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
1 @. T( O* u: c9 k Dim strBadChar, arrBadChar, tempChar, I" v( h2 C0 H) a1 R
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00& b6 l# f7 P' y! e- I4 o
arrBadChar = Split(strBadChar, ",")7 r7 o- _4 _ j/ ]( {3 j
tempChar = strChar
6 q8 U9 G$ z; v For I = 0 To UBound(arrBadChar)/ p2 s' X" {7 n$ k- f
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空/ j T; [! `. P; e) T3 _0 ^
Next
( }* G/ I1 m3 h; u5 b$ O* g1 I RSQL = tempChar; ]+ o2 ?+ y b9 r- x2 j. H
End Function( v O8 j( b. I7 U1 g+ y6 ~
|