<%
'ֹSQLע
dim urlnlu
urlnlu=LCase(Request.ServerVariables("QUERY_STRING"))
if instr(urlnlu,"select")>0 OR instr(urlnlu,"'")>0 OR instr(urlnlu,"'")>0 _
	OR instr(urlnlu,")")>0 OR instr(urlnlu,"(")>0 OR instr(urlnlu,"*")>0 _
	OR instr(urlnlu,chr(32))>0 or instr(urlnlu,"where")>0 OR instr(urlnlu,"and")>0 _
	OR instr(urlnlu,"not")>0 OR instr(urlnlu,",")>0 OR instr(urlnlu,"from")>0 _
	OR instr(urlnlu,"sum")>0 OR instr(urlnlu,"avg")>0 OR instr(urlnlu,"max")>0 _
	OR instr(urlnlu,"min")>0 OR instr(urlnlu,"delete")>0 OR instr(urlnlu,"insert")>0 _
	OR instr(urlnlu,"table")>0 OR instr(urlnlu,"update")>0 then
response.Write("ĵַ")
response.end
end if
%>