对特殊字符的过滤代码

admin

public Function RSQL(strChar)
. b! @$ f  V; A  m+ c1 ]: ?        If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
        Dim strBadChar, arrBadChar, tempChar, I
' P9 T4 K, A) ]+ m  y/ a  b        strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符    ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
        arrBadChar = Split(strBadChar, ",")
- g1 p* Z# L& d6 s" k        tempChar = strChar
! F* R2 U# U1 Y6 Y9 f+ b        For I = 0 To UBound(arrBadChar)
" p2 \* z" G& F                tempChar = Replace(tempChar, arrBadChar(I), "")  ‘将特殊字符过滤为空
        Next
. G5 I/ K7 c" d% |# i        RSQL = tempChar
End Function
  |, k8 n4 M- h; c: p