public Function RSQL(strChar)8 F3 t- i. f8 R4 J1 O+ d/ R
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
H& Z& e- Q; C3 q/ L* l2 W) E Dim strBadChar, arrBadChar, tempChar, I# l9 k6 x. x, C& i6 {
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格（20）改成的00
; A$ b3 @: Q' L) a' L! B# l( l0 U arrBadChar = Split(strBadChar, ",")
3 Q5 A3 w7 x# M. k: K tempChar = strChar# Q: _- p8 I6 A
For I = 0 To UBound(arrBadChar)
3 p' `' t# b+ y S( \ tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空* @5 F+ J) |! Y5 K) V( m; A5 c
Next9 M2 \% ]( _9 E% j
RSQL = tempChar4 Q% Q2 I) W* i4 h+ S' V* y: K
End Function
/ V: A3 G1 U, b7 l; ?4 Y |
发表于 2012-9-15 14:40:40
收藏
支持
反对