replace函数 replace函数 男女转换

replace函数用途：

==显示用户提交的html语句

==实现提交信息的换行

==防止sql语句注入式攻击（如：用户登录）

1、显示html语句

虽然可以用sverver.htmlencode方法，但实际应用中无法实现换行，所以用replace函数实现

dim mystring

mystring=request("mystring")

mystring=replace(mystring,"&","&")'替换&,显示" "

mystring=replace(mystring,"<","&lt;")'替换<

mystring=replace(mystring,">","&gt;")'替换>

2、实现提交语句换行

mystring=replace(mystring,chr(13),"<br>")'替换回车符

mystring=replace(mystring,chr(32),"&nbsp;")'替换空格符

mystring=replace(mystring,chr(9),"&nbsp;&nbsp; &nbsp;&nbsp;") '替换tab符

3、防sql语句注入攻击

mystring=replace(mystring,chr(39),"&acute;")'替换单引号

mystring=replace(mystring,chr(34),"&quot;")'替换双引号

实际用法：

a.写成一个函数myreplace,实现字符过滤

<%
function myreplace(mystring)

mystring=replace(mystring,"&","&amp;")'替换&,显示"&nbsp;"

mystring=replace(mystring,"<","&lt;")'替换<

mystring=replace(mystring,">","&gt;")'替换>

mystring=replace(mystring,chr(13),"<br>")'替换回车符

mystring=replace(mystring,chr(32),"&nbsp;")'替换空格符

mystring=replace(mystring,chr(9),"&nbsp;&nbsp; &nbsp;&nbsp;") '替换tab符

mystring=replace(mystring,chr(39),"&acute;")'替换单引号

mystring=replace(mystring,chr(34),"&quot;")'替换双引号

myreplace=mystring '返回函数值

end function
%>

将该函数存在a.asp中，供留言板文件调用

b.登录防sql注入

If Request("userID")<>"" AndRequest("password")<>"" Then
Dim password,userID
userID=Request("userID")
password=Request("password")

userID=Replace(request("userid"),chr(39),"&acute;")'替换单引号
userID=Replace(userID,chr(34),"&quot;")'再替换双引号
password=Replace(request("password"),chr(39),"&acute;")'替换单引号
password=Replace(password,chr(34),"&quot;")'再替换双引号

c.显示asp源代码

asp 文件也是文本文件，从中读取这些文本后，也就是一个字符串。

viewasp.asp

'下面首先建立FileSystemObject对象实例
Dimfso
Set fso=Server.CreateObject("Scripting.FileSystemObject")
'下面建立TextStream对象实例，打开指定的文本文件
DimTextFile,strTemp
Set TextFile=fso.OpenTextFile(Server.MapPath("replace1.asp"))
'读取所有文件内容
strTemp=TextFile.ReadAll
'将内容输出在页面上，注意调用了处理函数
Response.Write myReplace(strTemp)
'关闭对象
Set fso=Nothing

'该函数用来转换HTML标记
Function myReplace(myString)
myString=Replace(myString,"&","&amp;")'替换&为字符实体&amp;

myString=Replace(myString,"<","&lt;")'替换<
myString=Replace(myString,">","&gt;")'替换>
myString=Replace(myString,chr(13),"<br>")'替换回车符
myString=Replace(myString,chr(32),"&nbsp;")'替换空格符
myString=Replace(myString,chr(9)," &nbsp;&nbsp; &nbsp;&nbsp;")'替换Tab缩进符
myReplace=myString'返回函数值
End Function