ASP防止SQL注入

'防止SQL注入
'http://0.0.0.0/bzhs/login.asp?logType=edit';WAITFOR DELAY '0:0:5' --
logType = Replace(Replace(Replace(Replace(logType,"-",""),"'",""),"&",""),";","")
fcdm = Replace(Replace(Replace(Replace(fcdm,"-",""),"'",""),"&",""),";","")
logname = Replace(Replace(Replace(logname,"'",""),"&",""),";","")
logpass = Replace(Replace(Replace(logpass,"'",""),"&",""),";","")