中国网络渗透测试联盟
标题:
对特殊字符的过滤代码
[打印本页]
作者:
admin
时间:
2012-9-15 14:40
标题:
对特殊字符的过滤代码
public Function RSQL(strChar)
0 ?! v2 I3 U: A
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
( c. l* J7 R# l1 w
Dim strBadChar, arrBadChar, tempChar, I
+ ]% }. B' z$ M' P- l
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
8 x: }* e* W' o% C1 l3 i
arrBadChar = Split(strBadChar, ",")
9 a& j1 v4 i! |- {& b4 g+ t% F V
tempChar = strChar
6 d2 K* M0 k2 Y; X; W
For I = 0 To UBound(arrBadChar)
3 z, b( c5 z( X8 L5 Q9 b: m7 T
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
! V2 P2 z" Y% f
Next
S5 O9 L ]7 B6 t# C1 {
RSQL = tempChar
7 S& n, _; q$ }! J
End Function
) ~- \5 S" J$ y' r4 k7 M
欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/)
Powered by Discuz! X3.2