Sql injection protection of website develop in ASP and MS-Access

Question

User2140234557 posted

Hi,

I have develop one website in asp and access.

But now a day it is facing a problem of sql injection.

So how can I protect the .asp pages from sql injection.

I have gone through some of the post and get that some function have to written to overcome the sql injection.Function as below...

<%    
   
function killChars(strWords)    
   
dim badChars    
dim newChars    
   
badChars = array("select", "drop", ";", "--", "insert",      
"delete", "xp_")    
newChars = strWords    
   
for i = 0 to uBound(badChars)    
newChars = replace(newChars, badChars(i), "")    
next    
   
killChars = newChars    
   
end function    
   
%>

Thanks in advance.Please help.

How to write the function in the code.