ASP替换字符

<%
 '用户输入非法字符
 dim checkstring(3)
 checkstring(0) = "'"
 checkstring(1) = " "
 checkstring(2) = ";"
 checkstring(3) = ":"
 
 '替换用户输入的非法字符 stringarray 非法字符数组 checkstring 需检查的字符串
 function ReplaceString(stringarray,checkstring)
 
  for i=0 to ubound(stringarray)
   checkstring = Replace(checkstring,stringarray(i),"")
  next
  
  ReplaceString = checkstring
  
 end function
%>
uid = ReplaceString(checkstring,Request.Form("loginname"))
upwd = ReplaceString(checkstring,Request.Form("password"))