HTML特殊字符数据库读写处理

 [写进数据库时调用]
'<script language='javascript'>
        '<!--///用户前台aspx提交时///
        '// 替换特殊字符
        'function HTMLEncode(text)
        '{
        ' text = text.replace(/&/g, "&amp;") ;
        ' text = text.replace(/"/g, "&quot;") ;
        ' text = text.replace(/</g, "&lt;") ;
        ' text = text.replace(/>/g, "&gt;") ;
        ' text = text.replace(/'/g, "’") ;
        ' text = text.replace(/\ /g,"&nbsp;");
        ' text = text.replace(/\n/g,"<br>");
        ' text = text.replace(/\t/g,"&nbsp;&nbsp;&nbsp;&nbsp;");   
        ' return text;
        '}
        '//-->
        '</script>

[数据读取时调用]
  Public Shared Function TextToHtml() As String
        If _Text <> Nothing Then
            _Text = _Text.Replace("&lt;", "<")
            _Text = _Text.Replace("&gt;", ">")
            _Text = _Text.Replace("&nbsp;", Chr(32))
            _Text = _Text.Replace("’", "'")
            _Text = _Text.Replace("&quot;", ControlChars.Quote)
            '//_Text = _Text.Replace("&amp;", "&")
            _Text = _Text.Replace("<br>", Chr(13))
            Return _Text
        Else
            Return Nothing
        End If
    End Function