Form non accetta " e '

[cardo]

Ho il problema che in un form per inserire annunci sul mio sito nom mi accetta le virgolette " e l'apostrafo, cosa può essere?

Di seguito il codicedel FORM e della pagina di invio:

<form action="vai.asp" method="post" name="mioform" onSubmit="return checkData()">
<span class="class">
<p align="center">
<table width="57%" border="1" align="center" cellpadding="0" cellspacing="0" bordercolor="#0000FF" bgcolor="#CCFFFF">
<tr>
<td><table width="511" border="0" align="center" cellspacing="2" bgcolor="#CCFFFF">
<tr>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td width="224"><div align="right"><font color="#000000" size="1">
<% giorno = date()%>
</font></div></td>
<td width="11"><font color="#000000"></font></td>
<td width="262"> <font color="#000000">
<input name="data" type="text" id="data3" value="<% response.write giorno %>" size="20" readonly="true">
<input name="rif" type="hidden" id="rif2" value="WK">
</font></td>
</tr>
<tr>
<td></td>
<td></td>
<td> <select name="ofce" id="ofce">
<option value="OFFRO">OFFRO</option>
<option value="CERCO">CERCO</option>
</select></td>
</tr>
<tr>
<td><div align="right"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Categoria</font></div></td>
<td></td>
<td><select name="categoria" id="categoria">
<option value="Pesci">Pesci</option>
<option value="Piante">Piante</option>
<option value="Acquari">Acquari</option>
<option value="Accessori">Accessori</option>
<option value="Editoria">Editoria</option>
</select></td>
</tr>
<tr>
<td><div align="right"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Nome:</font></div></td>
<td></td>
<td><input type="text" name="nome" size="20"> <font face=Verdana color=#ffffff
size=1></font></td>
</tr>
<tr>
<td><div align="right"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Socio
n.</font></div></td>
<td></td>
<td><input name="numero" type="text" id="numero" size="20"></td>
</tr>
<tr>
<td><div align="right"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Email:</font></div></td>
<td></td>
<td><input type="text" name="email" size="20"> <font face=Verdana color=#ffffff
size=1></font></td>
</tr>
<tr>
<td><div align="right"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Citt&agrave;</font></div></td>
<td></td>
<td><input name="citta" type="text" id="citta" size="20"></td>
</tr>
<tr>
<td><div align="right"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Telefono:</font></div></td>
<td></td>
<td><input type="text" name="telefono" size="20"> <font face=Verdana color=#ffffff
size=1></font></td>
</tr>
<tr>
<td><div align="right"><font size="1" face="Verdana, Arial, Helvetica, sans-serif">Annuncio:</font></div></td>
<td></td>
<td><textarea name="annuncio" cols="50" rows="10" id="annuncio"></textarea>
<font face=Verdana color=#ffffff
size=1></font></td>
</tr>
</table>

<table width="75%" border="1">
</table>

</td>
</tr>
</table>
</span>
<table width="80%" border="0" align="center">

</table>
<p align="center">
<input type="submit" value="INVIA ANNUNCIO">
<INPUT type=reset value="REIMPOSTA DATI" name=Submit2>
</p>
</form>

<%@LANGUAGE="JAVASCRIPT" CODEPAGE="1252"%>

<%
var data = Request.Form("data");
var ofce = Request.Form("ofce");
var categoria = Request.Form("categoria");
var nome = Request.Form("nome");
var numero= Request.Form("numero");
var email = Request.Form("email");
var citta = Request.Form("citta");
var telefono = Request.Form("telefono");
var annuncio = Request.Form("annuncio");


var ADOConn = new ActiveXObject("ADODB.Connection");

var strConn = "";
strConn += "DRIVER={Microsoft Access Driver (*.mdb)};";
strConn += "DBQ=" + Server.MapPath("/mdb-database/mercatino.mdb");

ADOConn.Open(strConn);

var query = "INSERT INTO Annunci(data,ofce,categoria,nome,numero,email,citt a,telefono,annuncio) VALUES ('" + data + "','" + ofce + "','" + categoria + "','" + nome + "','" + numero + "','" + email + "','" + citta + "','" + telefono + "','" + annuncio + "')";
ADOConn.Execute(query);

ADOConn.Close();


var data = Request.Form("data");
var ofce = Request.Form("ofce");
var categoria = Request.Form("categoria");
var nome = Request.Form("nome");
var numero = Request.Form("numero");
var email = Request.Form("email");
var citta = Request.Form("citta");
var telefono = Request.Form("telefono");
var cell = Request.Form("cell");
var annuncio = Request.Form("annuncio");

[fraude]

Mai sentito parlare di "replace" ?
Cerca sul forum...