public Function RSQL(strChar)5 `# ?; o( y- F" k% u
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
) s$ f" M! v% p. F p: I" Q1 o: t Dim strBadChar, arrBadChar, tempChar, I# `4 L9 _+ a( l. N% I$ a
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00% o ^0 o: I# w6 Y' @
arrBadChar = Split(strBadChar, ",")4 m& \4 D* u# J7 p6 ^
tempChar = strChar
# j; n" ]0 U, V/ b For I = 0 To UBound(arrBadChar)# ~2 t0 p. s& a
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空4 W s |: n; @+ \3 C
Next
' x* r8 h% ]5 N5 q# \; q, T RSQL = tempChar
( }2 l) O! t1 dEnd Function
* j/ n" h8 p F* j, K7 W8 N5 Q |