<%'防止SQL注入漏洞
function sqlchk(str,flag)
dim t
t=str
if flag=1 then
  if IsNumeric(t) then
    t=cint(t)
  else
    response.write "参数错误！"
    response.end
  end if
else
  if not t="" then
    't=replace(t," ","")
    t=replace(t,"'","''")
    t=replace(t,"select","")
    t=replace(t,"delete","")
    t=replace(t,"update","")
    t=replace(t,"chr","")
    t=replace(t,"top","")
  end if
end if
sqlchk=t
end function
%>