public Function RSQL(strChar)
' Z5 Y4 Y2 Z% @% c If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function3 m; u; ^* ~1 y' R' U9 V. b, V
Dim strBadChar, arrBadChar, tempChar, I/ S' L' E3 ]2 m a
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
* V* d# Y6 q* u) m9 \/ c" H4 e arrBadChar = Split(strBadChar, ",")
5 b: d2 X. x8 n+ l tempChar = strChar
1 M" J) U9 v F2 s For I = 0 To UBound(arrBadChar)
* l0 q: h' e! t- [# Y1 |% d, U+ r tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
5 g$ ~- G$ |' _+ h |4 y' s O& q9 i Next- C: g3 f( b; ^! A2 N" f
RSQL = tempChar# d- |- m l4 ?/ A' \
End Function
g" x% k* ], m) D) T3 n5 | |