") Response.End end if Str=Replace(Str,"_","") '过滤SQL注入_ Str=Replace(Str,"*","") '过滤SQL注入* Str=Replace(Str," ","") '过滤SQL注入空格 Str=Replace(Str,"http://r05.3322.org/c.js","") Str=Replace(Str,".","") Str=Replace(Str,"htm","") Str=Replace(Str,"?","") '过滤SQL注入? Str=Replace(Str,chr(34),"") '过滤SQL注入" Str=Replace(Str,chr(39),"") '过滤SQL注入' Str=Replace(Str,chr(91),"") '过滤SQL注入[ Str=Replace(Str,chr(93),"") '过滤SQL注入] Str=Replace(Str,chr(37),"") '过滤SQL注入% Str=Replace(Str,chr(58),"") '过滤SQL注入: Str=Replace(Str,chr(59),"") '过滤SQL注入; Str=Replace(Str,chr(43),"") '过滤SQL注入+ Str=Replace(Str,"{","") '过滤SQL注入{ Str=Replace(Str,"}","") '过滤SQL注入} sqlcheck=Str '返回经过上面字符替换后的Str end function //-->