对特殊字符的过滤代码

admin

public Function RSQL(strChar)
+ V0 n- v1 u4 d4 T4 G  z        If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
3 V* }: S& C7 B& J$ t: V        Dim strBadChar, arrBadChar, tempChar, I
2 O' b4 P) l$ `) C, H. @$ i/ v        strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符    ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
        arrBadChar = Split(strBadChar, ",")
        tempChar = strChar
# [! F5 p- B7 G9 ]1 Z1 S8 A" d        For I = 0 To UBound(arrBadChar)
8 w6 ~8 }: c1 I8 J                tempChar = Replace(tempChar, arrBadChar(I), "")  ‘将特殊字符过滤为空
; j" g( D4 b  F* g1 D+ C  `        Next
0 p0 y6 c1 O# C% D8 Z        RSQL = tempChar
! c3 E* i! |) y$ [- J6 N- G0 V  ZEnd Function