Just put the asp anti-injection effect code in conn.asp.
'Block attacks via address bar
url=Request.ServerVariables(QUERY_STRING)
if instr(url,;)>=1 then
url=Replace(url,;,;) : Response.Redirect(? & url)
end if
'Block attacks via forms
for each item in request.form
stritem=lcase(server.HTMLEncode(Request.form(item)))
if instr(stritem,select )>=1 or instr(stritem,insert )>=1 or instr(stritem,update )>=1 or instr(stritem,delete )>=1 or instr(stritem,exec )>=1 or instr(stritem,declare)>=1 then
response.write (Sorry, please do not enter illegal characters!)
response.end
end if
next