<%
'·ÀÖ¹×¢Èë
dim param,val
For Each param In Request.QueryString
    val=request.QueryString(param)
	If InStr(val,"'")>0  or InStr(val,"0x")>0 Then
		response.Write("error")
		response.End()
	end if
Next
''''''''''''''''''''''''''''''''''''''''''''''''''''
'È¥³ý·Ç·¨×Ö·û
''''''''''''''''''''''''''''''''''''''''''''''''''''
function replaceBadChar(str)
	dim returnStr
	returnStr=str
	if(returnStr<>"") then
	returnStr=replace(str,"'","")
	returnStr=replace(str,"select","")	
	returnStr=replace(str,"insert","")	
	returnStr=replace(str,"%","")
	returnStr=replace(str,".","")
	returnStr=replace(str,"*","")
	returnStr=replace(str,"&","")
	end if
	replaceBadChar=returnStr
end function

function GetMax(s,n)
	GetMax=left(s,n)
end function
%>