复制代码 代码如下:
functionHTMLEncode(fString)
ifnotisnull(fString)then
fString=replace(fString,">",">")
fString=replace(fString,"<","&lt;")

fString=Replace(fString,CHR(32),"&nbsp;")
fString=Replace(fString,CHR(9),"&nbsp;")
fString=Replace(fString,CHR(34),"&quot;")
fString=Replace(fString,CHR(39),"&#39;")
fString=Replace(fString,CHR(13),"")
fString=Replace(fString,CHR(10)&CHR(10),"</P><P>")
fString=Replace(fString,CHR(10),"<BR>")

HTMLEncode=fString
endif
endfunction

FunctionSafe(str)'该函数用来判断传递过来的变量是否包含特殊字符,没有返回TRUE
Dims_BadStr,n,i
s_BadStr="'　&<>?%,;:()`~!@#$^*{}[]|\/+-="&Chr(34)&Chr(9)&Chr(32)
n=Len(s_BadStr)
Safe=True
Fori=1Ton
IfInstr(str,Mid(s_BadStr,i,1))>0Then
Safe=False
ExitFunction
EndIf
Next
EndFunction