word_pass.asp

一个VB做的语音系统控件

<%
  function word_pass(word)
     str="<,>,vb,java,',system,insert,update,%,&,*,=,INSERT,UPDATE,SELECT,select"
     str_temp=split(str,",")
     j=len(word)
     if j=0 then response.redirect "msg.asp?msg=请输入正确资料!"
     for i=1 to len(word)
       for k=1 to ubound(str_temp)
           if mid(word,i,len(str_temp(k)))=str_temp(k) then 
              response.redirect "msg.asp?msg=您的信息中包含非法字符!"
              response.end
           end if
       next
     next
     word_pass=word
  end function
%>