public Function RSQL(strChar)- i2 u7 W' r9 m ?2 A/ O; q
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
, x/ s0 c' y& }* e( g$ j2 i- Y Dim strBadChar, arrBadChar, tempChar, I
& a1 {8 r3 a7 i1 D1 T strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
0 v/ D2 X& x- E" \ arrBadChar = Split(strBadChar, ",")
: y! K1 E5 W/ m' q/ y4 R tempChar = strChar! E/ Z) s* b' Z% J: C
For I = 0 To UBound(arrBadChar)
0 x) Q4 o& O$ ? tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
$ o: \, V+ Y# M8 k3 ?( h- k Next
1 m d) z6 a$ ^6 \4 J2 j2 B RSQL = tempChar' F7 [3 z8 I% p2 }$ p
End Function& j# H$ [( {3 ?% [2 `4 z3 f) K+ a
|