public Function RSQL(strChar)
3 F( t0 w8 d1 A" ?1 @ If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function& V8 Z( z7 ]- `; P4 n5 G/ m& b5 X
Dim strBadChar, arrBadChar, tempChar, I" M ?& w+ G; b( T+ s
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00* x$ F. E; Y0 ?; m( l* Z( M8 M+ X
arrBadChar = Split(strBadChar, ",")
1 j: k: j' y& N4 J tempChar = strChar
9 I; [' J7 o" l5 L! U W For I = 0 To UBound(arrBadChar)3 w" O- u' Z( s
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空3 ? ^; |7 }. g& S) @+ A
Next
; F4 y- i* q6 s0 B) p9 o RSQL = tempChar
% ]' Z& d3 h& i) J1 o+ ?End Function
, X' ~2 a# o! W1 j9 S7 P. ^. s |