<% '============================================ '函数名:GetNumericParam '描 述:获取数字型参数 '参 数: ' ParamName:Url参数名称 '============================================ Function GetNumericParam(ParamName) Dim ParamValue ParamValue=Request.QueryString(ParamName) If ParamValue="" Then ParamValue=Request.Form(ParamName) If not isNumeric(ParamValue) Then Response.write "错误:参数[" & ParamName & "]必须为数字型!" Response.end End if GetNumericParam=ParamValue End Function '============================================ '函数名:GetStringParam '描 述:获取字符型参数 '参 数: ' ParamName:Url参数名称 '============================================ Function GetStringParam(ParamName) Dim ParamValue ParamValue=Request.QueryString(ParamName) If ParamValue="" Then ParamValue=Request.Form(ParamName) If ParamValue<>"" Then ParamValue=replace(ParamValue,"'","''") ParamValue=replace(ParamValue,"'","’") ParamValue=replace(ParamValue,";",";") ParamValue=replace(ParamValue,">","》") ParamValue=replace(ParamValue,"<","《") ParamValue=replace(ParamValue,"=","=") ParamValue=replace(ParamValue,"%","%") ParamValue=replace(ParamValue,",",",") 'ParamValue=replace(ParamValue,".","。") ParamValue=replace(ParamValue,"?","?") ParamValue=replace(ParamValue,"#","#") ParamValue=replace(ParamValue,"!","!") End If GetStringParam=ParamValue End Function %>