public Function RSQL(strChar)0 j4 o7 v& |6 j/ p: {* n$ F9 q
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
& `4 x X3 F# Q1 o5 Q Dim strBadChar, arrBadChar, tempChar, I
5 M$ W& S$ x8 o strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
. E7 E- ~* z6 d+ I! q arrBadChar = Split(strBadChar, ","): X7 T) Q0 \# V
tempChar = strChar
( T `" q5 t7 i0 Z! [& y For I = 0 To UBound(arrBadChar)7 _7 h( n7 P- Q9 Q
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
: w# N" m9 c1 H Next
% P4 W2 ^. n2 q) j r1 a RSQL = tempChar4 J2 _' [/ X+ B4 _. @0 J
End Function
/ H5 o4 A, m0 p6 I q7 x |