中国网络渗透测试联盟
标题:
对特殊字符的过滤代码
[打印本页]
作者:
admin
时间:
2012-9-15 14:40
标题:
对特殊字符的过滤代码
public Function RSQL(strChar)
# W0 `" g. W o- s( `( e
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
! O% l. B( y% c4 }7 \# l& S
Dim strBadChar, arrBadChar, tempChar, I
. O/ h, u+ x! `2 A. ?
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
# o; }$ E7 [- P u
arrBadChar = Split(strBadChar, ",")
2 q5 n8 r1 O6 \; @- t
tempChar = strChar
- v6 ] \; x8 m- v# R( e
For I = 0 To UBound(arrBadChar)
0 Z& P8 S1 U1 f6 q
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
9 k% W0 f R& G5 P
Next
8 ?1 D* u( A) P% n1 N
RSQL = tempChar
( O3 n; P& B; X' C- V$ r
End Function
5 j6 l$ B' P0 b7 ?, f
欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/)
Powered by Discuz! X3.2