An effective method to prevent ASP injection

code is as follows

copy code

function Killn (ByVal s1) ' filter numeric parameter if not IsNumeric (S1) then killn=0 Else if s1〈0 or s1〉2147483647 then Killn=0 Else killn=clng (S1) End-if end-if End Function Function KILLC (ByVal s1) Filter Currency parameters if not isnumeric (S1) then killc=0 Else Killc=formatnumber (s1,2,-1,0,0) End If End function Function Killw (ByVal s1) ' filter character parameter If Len (S1) =0 then killw= "" Else is Killw=trim (replace (S1, "'", "")) The End If End Function Function Killbad (ByVal s1) filters all dangerous characters, including cross-station scripting If Len (s1) = 0 Then killbad= "" br> else Killbad = Trim (replace (replace (replace) (replace (S1,CHR (10), "〈br〉"), CHR (34), "" "," "," > ")," ["," < ")," & "," & "), Chr (()," ' "), Chr ()," "), Chr ()," ")) End If End func tion