public Function RSQL(strChar). C, q, A' P/ r" R
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
9 r+ l0 c1 d9 }( p Dim strBadChar, arrBadChar, tempChar, I
) l, K2 q( n8 Y7 K strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00. _) z0 `* v8 x5 ^& J* L
arrBadChar = Split(strBadChar, ",")4 O7 _) } I6 W" X, W
tempChar = strChar9 A3 k9 \8 }$ c. ]/ t
For I = 0 To UBound(arrBadChar)
6 U5 Q" Y( R W9 v; g1 t& O tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空4 J! H, F" M( B9 w4 q% b
Next; _+ L+ k1 q) c, k6 s* b7 V
RSQL = tempChar; ~" p! P1 P3 w3 N ^4 | @1 z* }
End Function& Z. I9 [3 s/ v' a/ S% x& I1 K
|
发表于 2012-9-15 14:40:40
收藏
支持
反对