public Function RSQL(strChar)
g l1 h: d2 G! f0 k% e If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
$ t2 H9 p8 |2 f' y% { Dim strBadChar, arrBadChar, tempChar, I4 ?* r$ r+ L) p- H0 t
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00- C5 F B6 k" c+ m8 M$ u+ E' Q1 _9 X' z: m
arrBadChar = Split(strBadChar, ",")6 n) Q' g/ h. Y
tempChar = strChar
( i- R" L6 D% P1 E For I = 0 To UBound(arrBadChar)- Z8 \0 W0 ^; I; w* E1 Y0 ^
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
5 C+ {& j- h& \$ A6 Y' k" a Next
6 j, P) ^7 S* }" m$ y$ M) F RSQL = tempChar$ ^0 B2 O, k, q, {% ]+ f
End Function f/ k# p0 _. m$ Z$ h* K2 a/ _
|