Purify the network environment ASP program to realize the filtering foul language

Program | network

<!--#include file= ". /conn/dbconn1.asp "-->
<!--#include file= ". /inc/safe.asp "-->
<%
Content=replace_text (Request. Form ("content"))
Content=replace (Content, "<", "[")
Content=replace (Content, ">", "]")

Newsid=replace_text (Request. Form ("NewSID"))
Ip=request. Form ("IP")
Rname=replace_text (Request. Form ("Rname"))
Rname=replace (Rname, "<", "[")
Rname=replace (Rname, ">", "]")
' Username=replace_text (Request. Form ("username"))
' Username=replace (username, "<", "[")
' Username=replace (username, ">", "]")

' Dealing with published content is bad language
Set Rs=server. CreateObject ("Adodb.recordset")
Sql= "SELECT * from BadWord"
Rs.Open sql,conn,3,3
If Rs.eof Then
Response. Write ("Mei ziliao!")
Else

On Error Resume Next
Do, not rs.bof, and not rs.eof
Content=replace (Content,rs.fields ("word"). Value, "* *")
Rname=replace (Rname,rs.fields ("word"). Value, "* *")
Rs.movenext
Loop
End If
Rs.close
Set rs=nothing
''''''''''''''''''''''''''''''
Set Rs=server. CreateObject ("ADODB.") RecordSet ")
Sql= "SELECT * from PL"
Rs.Open sql,conn,3,3
Rs.addnew
RS ("content") =content
RS ("NewSID") =newsid
RS ("IP") =ip
RS ("Rname") =rname
RS ("username") =username
Rs.update
Rs.close
%>
<%
Set Rsn=server. CreateObject ("Adodb.recordset")
sqln= "Select Newsid,plnum,plbz from News where newsid=" &newsid& "
Rsn.open sqln,conn,1,3
RSN ("Plnum") =rsn ("Plnum") +1
RSN ("PLBZ") =1
Rsn.update
Rsn.close
%>
<script>
Alert ("published successfully!") ")
parent.location.href= "Shownews.asp?newsid=<%=newsid%>"
</script>