复制代码 代码如下:

functionHTMLEncode(fString)

ifnotisnull(fString)then

fString=replace(fString,">",">")

fString=replace(fString,"<","<")

fString=Replace(fString,CHR(32),"")

fString=Replace(fString,CHR(9),"")

fString=Replace(fString,CHR(34),""")

fString=Replace(fString,CHR(39),"")

fString=Replace(fString,CHR(13),"")

fString=Replace(fString,CHR(10)&CHR(10),"</P><P>")

fString=Replace(fString,CHR(10),"<BR>")

HTMLEncode=fString

endif

endfunction

FunctionSafe(str)'该函数用来判断传递过来的变量是否包含特殊字符,没有返回TRUE

Dims_BadStr,n,i

s_BadStr="'&<>?%,;:()`~!@#$^*{}[]|/+-="&Chr(34)&Chr(9)&Chr(32)

n=Len(s_BadStr)

Safe=True

Fori=1Ton

IfInstr(str,Mid(s_BadStr,i,1))>0Then

Safe=False

ExitFunction

EndIf

Next

EndFunction