public Function RSQL(strChar)
: p8 | `7 f. |" g$ \: S) M/ ?# R If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function5 p0 {9 q/ N0 U7 r" |7 m- I
Dim strBadChar, arrBadChar, tempChar, I
8 {) V! K8 w1 x( A# p+ A { strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
+ h2 g* n+ B1 Z0 G _+ f+ B arrBadChar = Split(strBadChar, ",")
) u7 G6 Y, i0 B o, Q: F9 S6 O tempChar = strChar
8 l z. R8 h# a1 R/ o$ y For I = 0 To UBound(arrBadChar)! B! e1 O. G4 g& V/ X+ W& Y
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
8 w9 ]$ [! O, m0 C# q# C Next
# D! v5 m" f6 Z+ ~ RSQL = tempChar
0 z8 g# m7 b2 o- Z0 |6 mEnd Function
8 ^) E- J6 A, J* F9 B+ s |