asp 接受参数的时候，调用这个函数

Function SafeRequest(ParaName,ParaType)

'--- 传入参数 ---

'ParaName:参数名称-字符型

'ParaType:参数类型-数字型(1表示以上参数是数字，0表示以上参数为字符)

Dim ParaValue

ParaValue=Request(ParaName)

If ParaType=1 then

If ParaValue="" or not isNumeric(ParaValue) then

Response.write "参数" & ParaName & "必须为数字型！"

Response.end

End if

Else

If Isnull(ParaValue) Then

ParaValue = ""

Else

ParaValue=Replace(ParaValue,"DELETE","")

ParaValue=Replace(ParaValue,"SELECT","")

ParaValue=Replace(ParaValue,"INSERT","")

ParaValue=Replace(ParaValue,"UPDATE","")

'Str=Replace(Str,"OR","")

ParaValue=Replace(ParaValue," ","")

ParaValue=Replace(ParaValue,"%20","")

ParaValue=Replace(ParaValue,"--","")

ParaValue=Replace(ParaValue,"'","''")

End If

End if

SafeRequest=ParaValue

End function