Script maligno a trvés de formulario

[mc_quake]

yo ocupo algo similar

Código asp:

Function killChars(strWords)
    dim badChars
    dim newChars
    
    badChars = array("xp_", "<", ">","--", ";--", ";", "/*", "*/", "@@","@", "char", "nchar", "varchar", "nvarchar", "alter", "begin", "cast", "create", "cursor", "declare", "delete", "drop", "end", "exec", "execute", "fetch", "insert","kill", "open", "select", "sys", "sysobjects", "syscolumns", "table", "update","truncate","dim","java", "script","'","´","href","content-transfer-encoding","quoted-printable","content-type","subject:","bcc:","x-mailer")
    newChars = strWords
    
    for i = 0 to uBound(badChars)
    newChars = replace(newChars, badChars(i), "")
    next
    
    killChars = newChars
End Function