public Function RSQL(strChar)
! L: z% Z5 F+ ?+ _ If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
2 V8 k) c- M6 [: }: [3 @2 X Dim strBadChar, arrBadChar, tempChar, I3 n. |: r, h9 X
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
+ ~1 g0 ~3 d( e+ s3 q! l arrBadChar = Split(strBadChar, ",")
# w9 _ k0 `6 n' ] tempChar = strChar
) p" U I+ A+ n3 z9 n. ?) r For I = 0 To UBound(arrBadChar)
# O0 a8 ]/ X+ E! H i5 l4 z tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空7 r8 q; h: m& _6 B$ B! Z8 c
Next h4 k1 \6 k+ d1 p% f3 `
RSQL = tempChar4 [9 ]; m$ g; x, b& `$ V. c) |' W
End Function
8 a0 r! C3 _5 Y1 ? |