'替换SQL语句中的特殊字符

Function SqlFix()Function SqlFix(ByVal str As String) As String
Dim strTmp
If str & "" = "" Then
Exit Function
End If
strTmp = Replace(str, "'", "''")
strTmp = Replace(strTmp, """", "")
strTmp = Replace(strTmp, ";", "")
strTmp = Replace(strTmp, "&", "")
strTmp = Replace(strTmp, " ", "")
strTmp = Replace(strTmp, " ", "")
strTmp = Replace(strTmp, "%20", "")
strTmp = Replace(strTmp, "--", "")
strTmp = Replace(strTmp, "==", "")
strTmp = Replace(strTmp, "<", "")
strTmp = Replace(strTmp, ">", "")
strTmp = Replace(strTmp, "%", "")
SqlFix = strTmp
End Function

Function SqlFix()Function SqlFix(ByVal str As String) As String
Dim strTmp
If str & "" = "" Then
Exit Function
End If
strTmp = Replace(str, "'", "''")
strTmp = Replace(strTmp, """", "")
strTmp = Replace(strTmp, ";", "")
strTmp = Replace(strTmp, "&", "")
strTmp = Replace(strTmp, " ", "")
strTmp = Replace(strTmp, " ", "")
strTmp = Replace(strTmp, "%20", "")
strTmp = Replace(strTmp, "--", "")
strTmp = Replace(strTmp, "==", "")
strTmp = Replace(strTmp, "<", "")
strTmp = Replace(strTmp, ">", "")
strTmp = Replace(strTmp, "%", "")
SqlFix = strTmp
End Function
本文介绍了一个用于清理SQL输入的VBA函数,该函数通过替换潜在危险或干扰性的特殊字符来增强SQL查询的安全性和稳定性。
22万+

被折叠的 条评论
为什么被折叠?



