public Function RSQL(strChar)2 d3 g+ n. K$ E; F \7 h
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function# A t8 [; A1 M5 d# t3 t$ `/ b; Z1 n
Dim strBadChar, arrBadChar, tempChar, I
+ r5 w; d" H, s A: h strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的006 s) P2 B9 x+ G A
arrBadChar = Split(strBadChar, ",")
! ?# J9 ^% R! ~7 _ tempChar = strChar1 Z2 s- z& ]/ |* r9 p% u9 n/ [
For I = 0 To UBound(arrBadChar)
; y( _' \2 z4 n& F, q5 n tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空3 [8 G5 ], T# J6 G6 F2 Q- U5 g
Next& i) w% `# E* C4 ^
RSQL = tempChar$ c% C* ]- d7 b. x
End Function
8 j4 o5 V" a. |+ w( h/ G |