public Function RSQL(strChar)' o) T2 g; _( b! H2 C
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
& ]4 L4 G b1 }+ v* | Dim strBadChar, arrBadChar, tempChar, I9 x4 B+ c# h/ W: P2 S1 j5 v
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00% C* d6 l0 ?9 }" ` R. }" O
arrBadChar = Split(strBadChar, ",")
/ k; P$ F! x: W tempChar = strChar4 o7 _% q: F5 n" y- F
For I = 0 To UBound(arrBadChar)! n8 E5 m8 N- [% A$ B
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
4 J9 j2 W [# U$ `- C; w7 Y$ ~$ Q Next
# O5 D b+ |/ E RSQL = tempChar
3 f! p/ ?: e0 i1 {4 r5 SEnd Function
, r, @8 j9 [9 f' Z9 a: F" G |