简单的ASP页面防SQL攻击程序

'检查非法输入
CheckRequestItems()

'检查非法SQL注入
Function CheckRequestItems()
 For Each Elements In Request.QueryString
  If Instr(1, Request.QueryString(Elements), ";", 1) > 0 And Instr(1, Request.QueryString(Elements), "exec", 1) > 0 Then
   Response.Write("您提交的数据不合法！")
   Response.End()
  End If
 Next
 For Each Elements In Request.Form
  If Instr(1, Request.QueryString(Elements), ";", 1) > 0 And Instr(1, Request.QueryString(Elements), "exec", 1) > 0 Then
   Response.Write("您提交的数据不合法！")
   Response.End()
  End If
 Next
End Function