public Function RSQL(strChar)
1 w% r f d1 @ m7 A If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function( S0 f1 }6 F5 ] T1 B# o8 _
Dim strBadChar, arrBadChar, tempChar, I
! z( W# o* v; G; j strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
$ M) J* ?2 {; _' P9 S arrBadChar = Split(strBadChar, ",")
6 @: G$ E' w& V tempChar = strChar
9 O! G: U2 `6 M, ]( a( b. _/ ^8 D$ c; f For I = 0 To UBound(arrBadChar)
/ B+ h' G ^: M+ Y. ~6 M9 T tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
# w- {: I: ?& t Next
& a7 e; B$ Z( _/ W RSQL = tempChar
' o# j8 }: p* O: \$ {- ZEnd Function
- P0 _( g6 O& a; z |