ASP特殊字符过滤

Function ChkInvaildWord(Words)
Const InvaildWords="select|update|delete|insert|@|--|," /'/'需要过滤得字符以“|”隔开，最后结束的字符必须是|

ChkInvaildWord=True
InvaildWord=Split(InvaildWords,"|")
inWords=LCase(Trim(Words))

For i=LBound(InvaildWord) To UBound(InvaildWord)
If Instr(inWords,InvaildWord(i))>0 Then
ChkInvaildWord=True
Exit Function
End If
Next
ChkInvaildWord=False
End Function