<!DOCTYPE html>
<html>
<body>

<%
如果 Request.QueryString<>"" Then
     如果 Request.QueryString("name")<>", " Then
       name=Request.QueryString("name")
         if instr(name,"/")=0 and instr(name,"\")=0 and instr(name,"<")=0 then
         name1=Request.QueryString("name")(1)
         name2=Request.QueryString("name")(2)
         else
             response.write("非法输入")
             response.end
         end if
     end if
end if
%>


<form action="demo_reqquery2.asp" method="get">

<input type="text" name="name" value="<%=name1%>" />
<br>
姓氏
<input type="text" name="name" value="<%=name2%>" />
<br>
<input type="submit" value="Submit" />
</form>
<hr>
<%
如果 Request.QueryString<>"" Then
     Response.Write("<p>")
     Response.Write("从表单接收到的信息是:")
     Response.Write("</p><p>")
     Response.Write("name=" & name)
     Response.Write("</p><p>")
     Response.Write("name 属性的计数是: ")
     Response.Write(Request.QueryString("name").Count)
     Response.Write("</p><p>")
     Response.Write("名字=" & name1)
     Response.Write("</p><p>")
     Response.Write("姓氏=" & name2)
     Response.Write("</p>")
end if
%>

</body>
</html>