public Function RSQL(strChar), B* y; V! R% j! y
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function0 b! e3 t) e8 M `/ S, i; d; \5 n
Dim strBadChar, arrBadChar, tempChar, I
! ~" T5 J$ R# K) m7 n' X strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
6 x# b6 j+ t: _ arrBadChar = Split(strBadChar, ",")- e5 d3 u \* M& T# l
tempChar = strChar S& P' d$ K' Y% S l
For I = 0 To UBound(arrBadChar)
! e1 M7 y7 j* m* [8 u tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
5 T" y# A! s& ]+ _% ~' J Next: d+ c$ B1 W6 b' @
RSQL = tempChar
) |8 n: C9 v/ {0 Y0 VEnd Function
! j( H# t* H5 [5 H( T |