public Function RSQL(strChar)
! M' |! n' {/ W% g' W9 y If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
" q! s. | O. F( Z Dim strBadChar, arrBadChar, tempChar, I
6 {! ^. l& K; [$ ^ strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00+ w, p7 ] a3 P4 F M
arrBadChar = Split(strBadChar, ",")
; h7 r0 F- o1 i! ~1 D/ f tempChar = strChar
& T+ q" v0 r+ {0 |5 ]2 r+ ~$ ? For I = 0 To UBound(arrBadChar), L+ O: }* W3 w" K# @
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空5 y- r3 D2 O0 m
Next
. }: a; K5 ^( L+ C5 E: b RSQL = tempChar
) u, P. X( y: z8 f/ nEnd Function
& \1 ~' p4 T# H2 ?8 }4 t. A |