[求助]这也有非法字符
<!--#include file="dbpath/dbpath.asp"--><!--#include file="function/char.inc"-->
<%
ssubject = CheckStr(request.form("txtcontop"))
sanser = CheckStr(request.form("txtanser"))
sadminhead = CheckStr(request.form("adminhead"))
useridtxt = request("userid")
pagetxt = Request("cpage")
scheckbox=request.form("htmlok")
sansertime=cstr(now())
upsql=" UPDATE book SET ansertime='" & sansertime & "',subject='" & ssubject & "',adminhead='" & sadminhead & "',anser='" & sanser &"' WHERE id=" & useridtxt
conn.Execute upsql
set conn=nothing
response.redirect "manage.asp?page=" & pagetxt
%>