<% Set MyConn = Server.CreateObject("ADODB.Connection") MyConn.Open "driver={SQL Server};server=NEW-IPADDRESS;UID=NEW-USERNAME;PASSWORD=NEW-PASSWORD;DATABASE=NEW-DATABASE" function killChars(strWords) dim badChars dim newChars badChars = array("<",">","(",")","CHAR(","update","select", "drop", ";", "--", "insert", "delete", "xp_", "@@","=","","\", "/", "&", ";","%","?", "UPDATE", "SELECT" , "DROP", "INSERT", "DELETE", "XP_", "") strWords = replace(strWords, "'", "''") newChars = strWords for i = 0 to uBound(badChars) newChars = replace(newChars, badChars(i), "") next killChars = newChars end function %>