public Function RSQL(strChar)
' Y4 h# N. R" i- i) ~9 [ If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
$ h7 t* D& i9 Y Dim strBadChar, arrBadChar, tempChar, I% V$ I3 h5 [8 W% H- J' N
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00- o7 ] l) i, U
arrBadChar = Split(strBadChar, ",")
+ V1 |5 k# B/ q1 S/ c) h tempChar = strChar; i" b2 O. @0 q6 _8 K _1 R3 T T
For I = 0 To UBound(arrBadChar)
5 R5 M5 S* W3 g tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空7 c6 e* }: u# u) q" i
Next
- j8 ~0 S g0 b6 X, G RSQL = tempChar* p7 G) y) Q6 f% S* q0 R
End Function/ {6 u% Q3 U2 u# r1 u8 k
|