<%
function HTMLEncode(fString)

    fString = replace(fString, ">", "&gt;")
    fString = replace(fString, "<", "&lt;")
    fString = Replace(fString, CHR(13), "")
    fString = Replace(fString, CHR(10) & CHR(10), "</P><P>")
    fString = Replace(fString, CHR(10), "<BR>")
    fString = Replace(fString, " ","&nbsp;")
    fstring = replace(fstring,"'","''")
    HTMLEncode = fString
    
end function

function HTMLDecode(fString)

    fString = replace(fString, "&gt;", ">")
    fString = replace(fString, "&lt;", "<")
    fString = Replace(fString, "", CHR(13))
    fString = Replace(fString, "</P><P>", CHR(10) & CHR(10))
    fString = Replace(fString, "<BR>", CHR(10))
    fString = Replace(fString, "&nbsp;"," ")
    fstring = replace(fstring,"''","'")
    HTMLDecode = fString
    
end function

function changechr(str) 
    changechr=replace(replace(replace(replace(str,"<","&lt;"),">","&gt;"),chr(13),"<br>")," "," ") 
    changechr=replace(changechr,"'","&acute;")
    changechr=replace(changechr,mid(" "" ",2,1),"&quot;")
end function

%>

引用:

---

个人觉得：插入数据库时只需要替换'就行了！
关键是在取出，取出时用HTMLEncode函数

---