<%
Function searchChk(sqlstr)
Attack=Array("'","or")
searchChk=sqlstr
for i=0 to Ubound(Attack)
	if instr(sqlstr,Attack(i))<>0 then
		searchChk=Replace(sqlstr,Attack(i),"")
		exit function
	end if
next
End Function
%>