复制代码代码如下:
functionHTMLEncode(fString)
ifnotisnull(fString)then
fString=replace(fString,">",">")
fString=replace(fString,"<","<")
fString=Replace(fString,CHR(32),"")
fString=Replace(fString,CHR(9),"")
fString=Replace(fString,CHR(34),"")
fString=Replace(fString,CHR(39),"'")
fString=Replace(fString,CHR(13),"")
fString=Replace(fString,CHR(10)&CHR(10),"</P><P>")
fString=Replace(fString,CHR(10),"<BR>")
HTMLEncode=fString
endif
endfunction
FunctionSafe(str)'该函数用来判断传递过来的变量是否包含特殊字符,没有返回TRUE
Dims_BadStr,n,i
s_BadStr="' &<>?%,;:()`~!@#$^*{}[]|//+-="&Chr(34)&Chr(9)&Chr(32)
n=Len(s_BadStr)
Safe=True
Fori=1Ton
IfInstr(str,Mid(s_BadStr,i,1))>0Then
Safe=False
ExitFunction
EndIf
Next
EndFunction