public Function RSQL(strChar)1 L6 }" U. O% b# `) u: u% Y- j
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
3 y$ [$ S! g. g Dim strBadChar, arrBadChar, tempChar, I
4 G2 J, {5 l0 R strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00( i" G H1 c( W8 T( r3 h9 \" p
arrBadChar = Split(strBadChar, ",")2 j& |: @3 g- @& z: r
tempChar = strChar' G! {) ~+ x9 ?( S0 }; D! D
For I = 0 To UBound(arrBadChar)$ x. w9 l8 A3 O' Z* j6 g6 K; U$ V
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空# U& O% a& ^, x# A# p% v* `
Next) c f7 I3 i/ w5 [5 H4 F
RSQL = tempChar, C% c, J# C% K& T8 h3 U) E
End Function
! T: E C( `' d# U% m |