中国网络渗透测试联盟
标题:
对特殊字符的过滤代码
[打印本页]
作者:
admin
时间:
2012-9-15 14:40
标题:
对特殊字符的过滤代码
public Function RSQL(strChar)
, @1 v, y5 T/ O$ p0 v
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
5 e1 T$ w. V2 A3 \+ s
Dim strBadChar, arrBadChar, tempChar, I
# G8 J5 |. O2 a
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
3 P. W& B6 Z$ f) m( z# w7 t
arrBadChar = Split(strBadChar, ",")
4 B0 q! `) n; `
tempChar = strChar
" C1 ^$ _. D9 O+ w
For I = 0 To UBound(arrBadChar)
, C0 \* ]; q6 S# }, ~+ _
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
) V6 M/ z, Y; n0 i
Next
; x+ p& A" o: p
RSQL = tempChar
$ a0 p9 L3 U: B; E9 g9 u# z
End Function
% B1 d" }: |+ K Z% v0 S# K- b3 P) ]4 Y
欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/)
Powered by Discuz! X3.2