public Function RSQL(strChar) c" D' H$ n; x8 d% J
If strChar = "" or IsNull(strChar) Then RSQL = "":Exit Function# w9 k, z: o) v% r
Dim strBadChar, arrBadChar, tempChar, I5 u: i$ V: n7 g& [
strBadChar = "$,#,',%,^,&,?,(,),<,>,[,],{,},/,\,;,:," & Chr(34) & "," & Chr(0) & ""’注意这里过滤的是特殊字符 ‘Chr(34)对应的ASCII码是双引号。Chr(0)其实就是我们上传改包把空格(20)改成的00+ l! q5 T: ]3 U4 I. c& G+ V# l
arrBadChar = Split(strBadChar, ",")
, Y- q# ?% a1 T" t& j2 { tempChar = strChar) f/ Q, t& Q& }0 T) P2 V# E
For I = 0 To UBound(arrBadChar)( p$ @/ _, B6 X# }; \# F
tempChar = Replace(tempChar, arrBadChar(I), "") ‘将特殊字符过滤为空6 E, U! F# i: G: U
Next& }% N% ~; M9 @& n) n4 Z
RSQL = tempChar: Q+ ]+ n2 y1 j0 u S# K% h
End Function
, l! T- c5 b1 W! q2 c& Y |