<% dim url url=Replace_Text(request("url")) if url <> "" then response.redirect url end if '过滤SQL非法字符并格式化html代码 function Replace_Text(fString) if isnull(fString) then Replace_Text="" exit function else fString=trim(fString) fString=replace(fString,"'","''") fString=replace(fString,";",";") fString=replace(fString,"--","—") fString=server.htmlencode(fString) Replace_Text=fString end if end function %>