New posts in Classic Asp

How can this input-sanitizer function be defeated?