public Function RSQL(strChar)
, L# \, s& x$ q If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function% a5 T0 Z2 S9 n$ Z
Dim strBadChar, arrBadChar, tempChar, I# G/ b" B; l: H, a; @. k
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
$ X$ w1 M* g y9 C$ f1 P4 ? arrBadChar = Split(strBadChar, ","): j, L5 [: p" W) ^; i
tempChar = strChar
$ `6 ?* Y6 V K, i& w: v For I = 0 To UBound(arrBadChar)
- v) l3 J2 n' l+ Y! q3 G0 R) h tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空6 i7 W! [4 ~0 ]& ]9 i* ^1 N) y; ]- D
Next: B6 C, o. z) c3 c7 a* ?
RSQL = tempChar
% t% X8 a5 P+ |; L8 a: u' u3 wEnd Function1 S1 J/ {# K0 Y) S- \" e, w
|