<!DOCTYPE html>
<html>
<body>
<form action="demo_reqquery.asp" method="get">
Your name: <input type="text" name="fname" size="20" />
<input type="submit" value="Submit" />
</form>
<%
dim fname
fname=Request.QueryString("fname")
if instr(fname,"/")=0 and instr(fname,"\")=0 and instr(fname,"<")=0 then
If fname<>"" Then
Response.Write("Hello " & fname & "!<br>")
Response.Write("How are you today?")
End If
else
response.write("Illegal input")
end if
%>
</body>
</html>