请问我怎么样做来过滤那些非法的sql字符？

[link2003]

比如' or !等等等等％

[zorou_fatal]

contents=replace(contents,"or","")
其他同上.

[cuipeng99]

function ReplaceBadChar(strChar)
if strChar="" then
ReplaceBadChar=""
else
ReplaceBadChar=replace(replace(replace(replace(replace(replace(replace(strChar,"'",""),"*",""),"?",""),"(",""),")",""),"<",""),".","")
end if
end function

[jww330]

Rem 过滤SQL非法字符
function checkStr(str)
if isnull(str) then
checkStr = ""
exit function
end if
checkStr=replace(str,"'","''")
end function

不过我想把　or　这种字符过滤掉不太合理吧？如果是一篇英文文章那不是乱套了？呵呵。

[富察咪咪]

将上述所有非法字符替换成双字节字符。