public Function RSQL(strChar)' k% q$ G( c. U3 I! L
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function# a( b1 {0 D4 h8 E! z
Dim strBadChar, arrBadChar, tempChar, I
2 P! I0 s7 O% R8 ^+ |0 R strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
6 D2 E3 V2 ]) W' Q4 o5 _/ C$ | arrBadChar = Split(strBadChar, ",")
4 `7 ~# P# V" }8 v9 D6 N tempChar = strChar$ A& V; \2 ]8 q( X' u) X3 U
For I = 0 To UBound(arrBadChar)3 B) c, D O+ H3 x$ A: N
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空" J" K7 M# k6 \4 h
Next
1 b A$ M( s2 ? RSQL = tempChar
# _% w) h' `/ k- TEnd Function
0 _ I: B0 F" B1 n# _# \ |