asp 接受参数的时候，调用这个函数

Function   SafeRequest(ParaName,ParaType)  
        '---   传入参数   ---  
        'ParaName:参数名称-字符型  
        'ParaType:参数类型-数字型(1表示以上参数是数字，0表示以上参数为字符)  
        Dim   ParaValue  
        ParaValue=Request(ParaName)  
        If   ParaType=1   then  
      If   ParaValue=""   or   not   isNumeric(ParaValue)   then  
    Response.write   "参数"   &   ParaName   &   "必须为数字型！"  
    Response.end  
      End   if  
        Else  
  If   Isnull(ParaValue)   Then  
  ParaValue   =   ""  
  Else  
  ParaValue=Replace(ParaValue,"DELETE","")  
  ParaValue=Replace(ParaValue,"SELECT","")  
  ParaValue=Replace(ParaValue,"INSERT","")  
  ParaValue=Replace(ParaValue,"UPDATE","")  
  'Str=Replace(Str,"OR","")  
  ParaValue=Replace(ParaValue,"   ","")  
  ParaValue=Replace(ParaValue,"%20","")  
  ParaValue=Replace(ParaValue,"--","")  
  ParaValue=Replace(ParaValue,"'","''")  
  End   If  
        End   if  
        SafeRequest=ParaValue  
  End   function

转载于:https://www.cnblogs.com/JemBai/archive/2008/07/31/1257036.html