字符验证/** 字符验证/**

/** * 防范SQL注入漏洞，检测输入的字符 * 需要检测的特殊字符及字符串有：",","-","/","//","'","%",""" * @param strInput 待检测的字符 * @author Tony Lin Added on 2008-10-21 */ function checkInputChar(strInput){ var forbidChar = new Array(",","-","/","//","'","%","/""); for (var i = 0;i < forbidChar.length ; i++){ if(strInput.indexOf(forbidChar[i]) >= 0){ alert&#40;"您输入的信息: "+strInput+" 中含有非法字符: "+forbidChar[i]+" 请更正！"&#41;; return false; } } return true; } /** * 遍历form内元素text类型检测字符合法性，此方法结合 checkInputChar(strInput)使用 * JSP页面只要调用该方法，并传入form名即可自动完成该form内所有元素字符的检测 * @param formName 待检测的form名 * @author Tony Lin Added on 2008-10-21 */ function validationFormText(formName){ var actionForm; //alert&#40;typeof(formName&#41;); if(typeof(formName)){ actionForm = formName; }else{ actionForm = document.forms[0]; } for (var i=0;i<actionForm.length;i++ ){ if (actionForm.elements[i].value != "" && actionForm.elements[i].type == "text"){ //alert&#40;actionForm.elements[i].value&#41;; if(!checkInputChar(actionForm.elements[i].value)){ actionForm.elements[i].focus(); return false; } } } return true; }