char.asp

这是个考试系统哦 想学的人可以看看哦

<%
Rem ==========通用函数=========

Rem 显示纯文本
function toTXT(str)
toTXT=str

Dim re
Set re = new regExp
re.Global=True
re.Pattern = "(\<.\>)|(\<\/.\>)"

toTXT = re.Replace(toTXT,"")

end function

Rem 输入字串只能是字母,数字,下划线和"-"
function IsValidabc(abc)
	dim names, name, i, c
	IsValidabc = true
	name = trim(abc)
	if Len(name) <= 0 then
		IsValidabc = false
		exit function
	end if
	for i = 1 to Len(name)
		c = Lcase(Mid(name, i, 1))
		if InStr("abcdefghijklmnopqrstuvwxyz_-", c) <= 0 and not IsNumeric(c) then
			IsValidabc = false
			exit function
		end if
	next
end function

Rem 判断数字是否整数
function isInt(para)
       dim str
       dim l,i
       if isNUll(para) then 
          isInt=false
          exit function
       end if
       str=cstr(para)
       if trim(str)="" then
          isInt=false
          exit function
       end if
       l=len(str)
       for i=1 to l
           if mid(str,i,1)>"9" or mid(str,i,1)<"0" then
              isInt=false 
              exit function
           end if
       next
       isInt=true
       if err.number<>0 then err.clear
end function

Rem 错误提示
rem 过滤字符

Rem 过滤HTML代码
function HTMLEncode(fString)
if not isnull(fString) then
    fString = trim(fString)
    fString = replace(fString, ">", "&gt;")
    fString = replace(fString, "<", "&lt;")

    fString = Replace(fString, CHR(32), "&nbsp;")
    fString = Replace(fString, CHR(9), "&nbsp;")
    fString = Replace(fString, CHR(34), "&quot;")
    fString = Replace(fString, CHR(39), "&#39;")
    fString = Replace(fString, CHR(13)&chr(10), "<br>")
    fString = Replace(fString, CHR(10)&chr(13), "<br>")
    fString = Replace(fString, CHR(13), "<br>")
    fString = Replace(fString, CHR(10) & CHR(10), "</P><P> ")
    fString = Replace(fString, CHR(10), "<BR> ")
    
    if fString="" then
    	fString = "[空白]"
    end if

    HTMLEncode = fString
end if
end function

Rem 过滤表单字符
function HTMLcode(fString)
if not isnull(fString) then
    fString = Replace(fString, CHR(13), "")
    fString = Replace(fString, CHR(10) & CHR(10), "</P><P>")
    fString = Replace(fString, CHR(10), "<BR>")
    HTMLcode = fString
end if
end function


Rem 过滤SQL非法字符
function checkStr(str)
	if isnull(str) then
		checkStr = ""
		exit function 
	end if
	checkStr=replace(str,"'","''")
end function

Rem 防止SQL注入
function checkSql(paraName,ParaType)
	dim ParaValue
	ParaValue=trim(request(paraName))
	if isnull(ParaValue) then
		checkSql = ""
		exit function
	end if
	if ParaType=1 then
		if not isNumeric(ParaValue) then
			response.write "参数"&ParaName&"必须为数字型！"
			response.end
		end if
	else
		ParaValue=replace(ParaValue,"'","''")
	end if
	checkSql=ParaValue
end function


Rem 检查邮件正确性
function IsValidEmail(email)
dim names, name, i, c
IsValidEmail = true
names = Split(email, "@")
if UBound(names) <> 1 then
   IsValidEmail = false
   exit function
end if
for each name in names
   if Len(name) <= 0 then
     IsValidEmail = false
     exit function
   end if
   for i = 1 to Len(name)
     c = Lcase(Mid(name, i, 1))
     if InStr("abcdefghijklmnopqrstuvwxyz_-.", c) <= 0 and not IsNumeric(c) then
       IsValidEmail = false
       exit function
     end if
   next
   if Left(name, 1) = "." or Right(name, 1) = "." then
      IsValidEmail = false
      exit function
   end if
next
if InStr(names(1), ".") <= 0 then
   IsValidEmail = false
   exit function