Form antispam

<%

Sub Commenti(Pagina)

Dim data
data = Date()

	strConn = "Provider=Microsoft.Jet.OLEDB.4.0; Data Source=" & Server.MapPath("/mdb-database/database.mdb")
	set conn = Server.CreateObject("ADODB.Connection")
	conn.Open strConn

	'Inserimento nuovo commento

	If Len(Request.Form("nome"))>3 and Len(Request.Form("commento"))>5 then
		conn.Execute "INSERT INTO commenti (nome, titolo, commento, pagina, data, IP) VALUES (" & _
				"'" & Replace(Request.Form("nome"), "'", "''") & "', " & _
				"'" & Replace(Request.Form("titolo"), "'", "''") & "', " & _
				"'" & Replace(Request.Form("commento"), "'", "''") & "', " & _
				"'" & Replace(Request.Form("pagina"), "'", "''") & "', " & _
	            "'" & Replace(Request.Form("data"), "'", "''") & "', " & _
				"'" & Request.ServerVariables("REMOTE_ADDR") & "')"
		Response.Redirect ("#")
	
	end if
	
	' estrai record
	set rs = Conn.Execute("SELECT nome, commento, data FROM commenti WHERE Pagina = '" & Replace(pagina, "'", "''") & "'")

	' non ci sono record
	if rs.Eof then Response.Write("<p><b><font color=#C40014>Nessun commento</p></font></b>")

	' ciclo su tutti i record
	do until rs.eof
		Response.Write("<p><b><font color=#C40014>Commento scritto da: </b></font><b>" & Server.HtmlEncode(rs("nome")) & "</b> <span class=date><font color=#808080>- " & Server.HtmlEncode(rs("data")) & "</font></span><br>")
		Response.Write(Server.HtmlEncode(rs("commento")) & "</p>")
		rs.moveNext
	loop

%></td>
    </tr>
  </table>
    <form method="post">
<input type="hidden" name="pagina" value="<%=pagina%>">
<input type="hidden" name="titolo" value="<%=rsa("titolo")%>">
<input type="hidden" name="data" value="<%=data%>">
<span class="style7">Nome:</span> 
<input name="nome" type="text" size="31" maxlength="100">
<br>
<textarea name="commento" cols="30" rows="5"></textarea><br>
<input type="submit" value="Lascia commento">
</form>
<%
	conn.Close
	set conn = Nothing

End Sub

%><% 

Commenti("http://www.retrogaming.it/videostar.asp?id=" & Request("id"))


%>