ASP Illegal character filtering function

Copy codeThe Code is as follows: <%
'================================================ ==================================== Check the validity of the submitted data
Function CheckInput ()
'-------- Definition section ------------------
Dim Fy_Post, Fy_Get, Fy_In, Fy_Inf, Fy_Xh, Fy_db, Fy_dbstr, Kill_IP, WriteSql
'Custom string to be filtered, separated by '|'
Fy_In = "'|; | and | (|) | exec | insert | select | delete | update | count | * | % | chr | mid | master | truncate | char | declare"

Fy_Inf = split (Fy_In, "| ")
'-------- POST part ------------------
If Request. Form <> "" Then
For Each Fy_Post In Request. Form
For Fy_Xh = 0 To Ubound (Fy_Inf)
If Instr (LCase (Request. Form (Fy_Post), Fy_Inf (Fy_Xh) <> 0 Then
Echo "<Script Language = JavaScript> alert ('Please do not include invalid characters in the parameter! '); History. go (-1); </Script>"
Response. End
End If
Next
Next
End If
'----------------------------------

'-------- GET part -------------------
If Request. QueryString <> "Then
For Each Fy_Get In Request. QueryString
For Fy_Xh = 0 To Ubound (Fy_Inf)
If Instr (LCase (Request. QueryString (Fy_Get), Fy_Inf (Fy_Xh) <> 0 Then
Echo "<Script Language = JavaScript> alert ('Please do not include invalid characters in the parameter! '); History. go (-1); </Script>"
Response. End
End If
Next
Next
End If
End Function
%>