public Function RSQL(strChar)
* k/ `( ] d4 s) Y; G$ E- {. b; t/ P If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function, o6 }, l- Y9 A* ?1 _2 ^, d3 s9 g. u
Dim strBadChar, arrBadChar, tempChar, I
% H) D3 P# J6 U$ F/ S" D strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的002 h( E# r8 C+ F u$ W+ s
arrBadChar = Split(strBadChar, ",")
* u" r& N) a8 s* n: ~2 w- F( G; X tempChar = strChar: R- [0 Z1 s' U* B+ H$ P$ ~0 \
For I = 0 To UBound(arrBadChar)
& U5 w" Z/ g6 g3 _ tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
: d1 R! U( {9 V Next( e5 g# a# h" _! r7 _4 r+ n
RSQL = tempChar/ Q* j! s6 d' |+ I2 [% `
End Function" A s- I: n. f3 l
|