asp sql安全过滤及防注入程序代码

好了费话不说多了我们来看看asp sql安全过滤及防注入程序代码哦，关于经常写asp的程序员这个安全防注入比较麻烦哦。

'**************************************************
'函数名：ReplaceBadChar
'作用：过滤非法的SQL字符
'参数：strChar-----要过滤的字符
'返回值：过滤后的字符
'**************************************************
function ReplaceBadChar(strChar)
if strChar="" then
ReplaceBadChar=""
else
ReplaceBadChar=replace(replace(replace(replace(replace(replace(replace(replace(strChar,"'",""),"*",""),"?",""),"(",""),")",""),"<",""),".",""),"%","")
end if
end function

'**************************************************
'函数名：CheckBadChar
'作用：检查非法字符
'参数：strChar-----要检查的字符
'返回值：检查后的字符有非法的为True
'作者: designed by jeanun
'**************************************************
function CheckBadChar(strChar)
  if Instr(strChar,"=")>0 or Instr(strChar,"%")>0 or Instr(strChar,"?")>0 or Instr(strChar,"&")>0 or Instr(strChar,";")>0 or Instr(strChar,",")>0 or Instr(strChar,"'")>0 or Instr(strChar,",")>0 or Instr(strChar,chr(34))>0 or Instr(strChar,chr(9))>0 or Instr(strChar,"$")>0 then
   CheckBadChar = true
  else
   CheckBadChar = false
  end if
end function

'**************************************************
'函数名：SafeRequest
'作用：安全的Request,只能取得[数字]
'参数：strChar-----字段名称
'返回值：检查后的读取字符
'作者: designed by jeanun
'**************************************************
function SafeRequest(strChar)
strChar = Trim(Request(""& strChar &""))
if CheckBadChar(strChar) = True Or IsNumeric(strChar) = False then
  Response.Write("<script>alert('请不要试图对网站非常规操作');history.go(-1)</script>")
  Response.End()
else
  SafeRequest = strChar
end if
end function

补充：asp教程,安全加密