public Function RSQL(strChar)
- @+ v" Q9 ?7 Y/ Q If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function
/ H" E1 J* h* M6 |! T2 X9 S2 g. ]* [ Dim strBadChar, arrBadChar, tempChar, I
) O. b6 Z6 `4 U" ^) H0 H8 N strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00
7 p+ k' ]2 J2 `! a- D3 ~3 G9 X arrBadChar = Split(strBadChar, ",")0 I; p& x4 Z" T
tempChar = strChar
8 S6 `* j. t( ^' ^6 l* i For I = 0 To UBound(arrBadChar)
$ W7 r( u) G! b7 O3 p2 K( U* m: _ tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空
# F: M$ S% h# p, ^* A' F" f Next0 f4 A7 \* Z9 s: y" d
RSQL = tempChar' t/ T: `5 b) b: i; [* L
End Function! k& f5 \& r% Q" ]1 Z
|