asp 過濾方法，自己常用的。

Function HTMLEncode(t0)IF Len(t0)<0 Or IsArray(t0) Then Exit Functiont0=Trim(t0)t0=Re(t0,CHR(9),"")         '"TAB"t0=Re(t0,CHR(13),"")        '斷行符號t0=Re(t0,CHR(22),"")t0=Re(t0,CHR(38),"&")'“&”t0=Re(t0,CHR(32)," ")'“ ”t0=Re(t0,CHR(34),""")'“"”t0=Re(t0,CHR(37),"%")'“%”t0=Re(t0,CHR(39),"'")'“'”t0=Re(t0,CHR(42),"*")'“*”t0=Re(t0,CHR(43),"+")'“+”t0=Re(t0,CHR(44),",")'“,”t0=Re(t0,CHR(45)&CHR(45),"--")'“--”t0=Re(t0,CHR(92),"\")'“\”t0=Re(t0,CHR(40),"(")'“(”t0=Re(t0,CHR(41),")")'“)”t0=Re(t0,CHR(60),"<")'“<”t0=Re(t0,CHR(62),">")'“>”t0=Re(t0,CHR(123),"{")'“{”t0=Re(t0,CHR(125),"}")'“}”t0=Re(t0,CHR(59),";")'“;”t0=Re(t0,CHR(10)&CHR(10),CHR(10))'把換行替換掉t0=Re(t0,CHR(10),"<br>")'換行t0=ReplaceText(t0,"([&#])([a-z0-9]*);","$1$2;")IF lyq_BadText<>"" Then t0=ReplaceText(t0,"("&lyq_BadText&")",String(Len("&$1&"),"*"))'過濾片假名(日文字元)[\u30A0-\u30FF] IF Is_sql Thent0=Escape(t0)t0=ReplaceText(t0,"%u30([A-F][0-F])","&#x30$1;")t0=Unescape(t0)End IFHTMLEncode=t0End Function

Function Re(t0,t1,t2)IF Isnull(t2) Then t2=""Re=Replace(t0,t1,t2)End Function
Function ReplaceText(t0,t1,t2)Set regEx=New RegExpregEx.Pattern=t1regEx.IgnoreCase=TrueregEx.Global=TrueReplaceText=regEx.Replace(""&t0&"",""&t2&"")Set regEx=nothingEnd Function