public Function RSQL(strChar)
5 W5 G0 G3 E+ [ W3 P If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
$ Q7 G4 o! M% R7 I3 B; Q Dim strBadChar, arrBadChar, tempChar, I
- W. i5 O; F! ~7 E4 Y, S& m strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
# O8 w8 K: b. W- K; {: c7 u arrBadChar = Split(strBadChar, ",")
8 q) s. a! n% E2 l; F2 j) Q9 C tempChar = strChar
5 I' N) t) K' b2 W5 K3 @) U For I = 0 To UBound(arrBadChar)
, m9 S5 U' }# p% [& Q9 r. [ tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
~2 m" C$ N2 o( m* X' o Next2 \6 ^1 k( {+ ^# y" v% b
RSQL = tempChar4 k1 I2 [) {; s
End Function
/ C8 o! b/ c. Y" n t" h* I |