public Function RSQL(strChar); s# r! H" U% {! K, ~7 Q
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function* v2 Y* Y# s$ P8 S
Dim strBadChar, arrBadChar, tempChar, I
% \' Z: x. {- R strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
, c q' F2 }3 h$ S8 ` arrBadChar = Split(strBadChar, ",")
- l! S. G' D2 W* o3 |/ n! x8 k tempChar = strChar
3 [9 ]: H0 a3 y. q8 D For I = 0 To UBound(arrBadChar)# p8 d- |- b) O! ~
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空: t5 H' [2 O& ?" f' u
Next: \% ~8 C+ B' }3 _; q
RSQL = tempChar
3 j& ]2 N) X2 B7 l5 m% {End Function/ A5 Q# j. E; W- l; r8 r
|