中国网络渗透测试联盟
标题:
对特殊字符的过滤代码
[打印本页]
作者:
admin
时间:
2012-9-15 14:40
标题:
对特殊字符的过滤代码
public Function RSQL(strChar)
- \9 c. I* p0 y% `! y3 N
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
! M' K( Y' u- K
Dim strBadChar, arrBadChar, tempChar, I
3 [( Y5 y* I% K+ u- C
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
, Y% M' E* ?2 q( J: v
arrBadChar = Split(strBadChar, ",")
" E4 ^, t/ b4 }) c9 Y2 {
tempChar = strChar
+ `0 \7 _* X- h& q) N0 @
For I = 0 To UBound(arrBadChar)
) H. N$ [! D* |6 ]7 B
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
; e; R0 @7 P: K2 C$ ^& L
Next
' N T: a+ |8 n& J! V9 y
RSQL = tempChar
) [, I( w3 z5 y! b- m
End Function
5 G$ f, Y0 G# m3 o% ]3 F* i
欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/)
Powered by Discuz! X3.2