public Function RSQL(strChar)8 h: B; f( t, w' d8 J
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
# A i. v. x r3 u/ ]2 g0 C Dim strBadChar, arrBadChar, tempChar, I. P# _) d6 _9 Y- K& ]0 h
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
/ e; ^2 ]( C4 W0 p arrBadChar = Split(strBadChar, ",")
# |6 O' U" q$ @: q9 C+ ~, [/ H tempChar = strChar
1 P% c+ l! B* r7 b9 c4 R- a/ B For I = 0 To UBound(arrBadChar). M. |6 r! a2 D8 W' W$ n5 B; ^* v' e
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空 Z0 R2 m- q, J3 y1 x6 d
Next$ t( B+ S# _- ?% ^8 A1 B
RSQL = tempChar
+ C/ P; @$ W& cEnd Function, u1 [' h1 [& {7 o
|