asp 过滤方法，自己常用的。

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36

Function HTMLEncode(t0)     IF Len(t0)<0 Or IsArray(t0) Then Exit Function     t0=Trim(t0)     t0=Re(t0,CHR(9),"")         '"TAB"     t0=Re(t0,CHR(13),"")        '回车     t0=Re(t0,CHR(22),"")     t0=Re(t0,CHR(38),"&")   '“&”     t0=Re(t0,CHR(32)," ")   '“ ”     t0=Re(t0,CHR(34),""")   '“"”     t0=Re(t0,CHR(37),"%")   '“%”     t0=Re(t0,CHR(39),"'")   '“'”     t0=Re(t0,CHR(42),"*")   '“*”     t0=Re(t0,CHR(43),"+")   '“+”     t0=Re(t0,CHR(44),",")   '“,”     t0=Re(t0,CHR(45)&CHR(45),"--")  '“--”     t0=Re(t0,CHR(92),"\")   '“\”     t0=Re(t0,CHR(40),"(")   '“(”     t0=Re(t0,CHR(41),")")   '“)”     t0=Re(t0,CHR(60),"<")    '“<”     t0=Re(t0,CHR(62),">")    '“>”     t0=Re(t0,CHR(123),"{")  '“{”     t0=Re(t0,CHR(125),"}")  '“}”     t0=Re(t0,CHR(59),";")   '“;”     t0=Re(t0,CHR(10)&CHR(10),CHR(10))'把换行替换掉     t0=Re(t0,CHR(10),"<br>")'换行     t0=ReplaceText(t0,"([&#])([a-z0-9]*);","$1$2;")       IF lyq_BadText<>"" Then t0=ReplaceText(t0,"("&lyq_BadText&")",String(Len("&$1&"),"*"))     '过滤片假名(日文字符)[\u30A0-\u30FF]     IF Is_sql Then         t0=Escape(t0)         t0=ReplaceText(t0,"%u30([A-F][0-F])","&#x30$1;")         t0=Unescape(t0)     End IF     HTMLEncode=t0 End Function

?

1

?

1 2 3 4 5 6 7 8 9 10 11 12 13 14

<pre class="brush:html">Function Re(t0,t1,t2)     IF Isnull(t2) Then t2=""     Re=Replace(t0,t1,t2) End Function </pre> <pre class="brush:html">Function ReplaceText(t0,t1,t2)     Set regEx=New RegExp         regEx.Pattern=t1         regEx.IgnoreCase=True         regEx.Global=True         ReplaceText=regEx.Replace(""&t0&"",""&t2&"")     Set regEx=nothing End Function </pre>