public Function RSQL(strChar)
; ^5 j+ T" a4 b" O* w& g o0 ` If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function2 f( z' `* V! T- I
Dim strBadChar, arrBadChar, tempChar, I- Y" G1 F1 a9 @1 M4 [6 n
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
6 k8 a5 e( y2 `, v, ] arrBadChar = Split(strBadChar, ",")
* w2 Q6 x* l- B+ r7 [2 ], c tempChar = strChar1 m: M+ e) ^2 A* K$ S& j$ a
For I = 0 To UBound(arrBadChar)
; I8 }2 t( |+ f3 w9 C tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
" v6 D: B, F; Z Next& A% x6 g, v- w( x& i/ d" [4 \/ @" `, Y9 ~
RSQL = tempChar5 R# y0 R+ H6 Z4 V/ q
End Function, d9 O, k- g- R% Y0 K
|