asp在线执行sql语句的函数

function gfv(str) 
    gfv = request.form(str) 
end function 

sub executesql  
    dim content:content = gfv("content")  
    on error resume next  
    conn.begintrans  
    conn.execute(content)  
    if err.number <> 0 then  
        err.clear  
        conn.rollback  
        conn.close:set conn = nothing  
        call alertbox("抱歉!sql语句输入错误!",2)  
    else  
        conn.committrans  
        conn.close:set conn = nothing  
        call alertbox("恭喜!sql语句执行完毕!",2)  
    end if  
end sub