中国网络渗透测试联盟
标题:
对特殊字符的过滤代码
[打印本页]
作者:
admin
时间:
2012-9-15 14:40
标题:
对特殊字符的过滤代码
public Function RSQL(strChar)
! Z& @; T! K- u, d& Y
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
* D$ u( |0 a. _" V* q' l, M3 w5 L
Dim strBadChar, arrBadChar, tempChar, I
/ N4 t, M: B% L2 `2 }" h
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
+ M$ M, `# W% Z" q3 B& T
arrBadChar = Split(strBadChar, ",")
4 u' r& N, R4 d% t( `: A2 M6 K
tempChar = strChar
6 [" @3 d+ t$ x/ y. R% F$ S5 F
For I = 0 To UBound(arrBadChar)
: x) R/ y5 I4 U; s! A
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
. o/ [9 f5 n! Z+ c' t! T) j
Next
8 O; q2 G9 |. D7 f7 M8 B: @
RSQL = tempChar
m! B: p; e$ l! d' A1 t
End Function
& z( B) U) t8 Y1 A7 X/ u b0 i
欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/)
Powered by Discuz! X3.2