sql注入相关

 &#39 单引号
封装过滤request
<%
function requestfilter(value)
...过滤程序
requestfilter=temp
end function
Set POST = Server.CreateObject("Scripting.Dictionary")
For Each x In request.Form
POST.add x,requestfilter(request.Form(x))
Next
name = POST("name")
%>