sql非法字符过滤函数
‘**************************************************
‘函数名:ReplaceBadChar
‘作 用:过滤非法的SQL字符
‘参 数:strChar—–要过滤的字符
‘返回值:过滤后的字符
‘**************************************************
Function ReplaceBadChar(strChar)
If strChar = “” Or IsNull(strChar) Then
ReplaceBadChar = “”
Exit Function
End If
Dim strBadChar, arrBadChar, tempChar, i
strBadChar = “+,’,–,%,^,&,?,(,),<,>,[,],{,},/,\,;,:,” & Chr(34) & “,” & Chr(0) & “”
arrBadChar = Split(strBadChar, “,”)
tempChar = strChar
For i = 0 To UBound(arrBadChar)
tempChar = Replace(tempChar, arrBadChar(i), “”)
Next
tempChar = Replace(tempChar, “@@”, “@”)
ReplaceBadChar = tempChar
End Function