<%@ page contentType="text/html; charset=utf-8" pageEncoding="utf-8"%> <%! public String r_call(String flag) { String pl1 = flag; if (pl1 == null) { pl1 = ""; } String str = pl1.replaceAll("<","<"); str = str.replaceAll("script",""); str = str.replaceAll(">",">"); str = str.replaceAll("'","''"); return str; } public String r_call2(String flag) { String pl1 = flag; if (pl1 == null) { pl1 = ""; } String str = pl1.replaceAll("script",""); str = str.replaceAll("'","''"); return str; } %>