安全考虑，不想限制在

ks_cls/kesion.label.commoncls.asp里修改

找到代码如下

Public Function G(Str)
  G = Replace(Replace(Replace(Replace(Request(Str), "'", ""), """", ""),"%","％"),"*","＊")
End Function

Public Function S(Str)
  S = DelSql(Replace(Replace(Replace(Request(Str), "'", ""), """", ""),"%","％"))
End Function