File Manager
Back to List
|
Up to Parent Directory
| Current Directory: ~/info4stu
Editing: info4stu/add_attach.asp
Full path: C:\ict\ICT\info4stu\add_attach.asp
Permissions: rwx
Write test: File appears not directly writable
Current process identity: IIS APPPOOL\DefaultAppPool
<!--#INCLUDE FILE="Connectdb.asp"--> <!--#INCLUDE FILE="chk_login.asp"--> <% id_member=session("id_member1") attacttxt=request.form("txtattach") 'id_in=session("idin") 'response.write (id_member) 'response.write (smnews) date_mo=now 'a=len("mmnews") 'response.write (a) 'if a<250 then sqlatt="select * from info_attach" set orsatt=server.createobject("adodb.recordset") orsatt.open sqlatt,conn,1,3 if not orsatt.eof then orsatt.movelast id_attachs=orsatt("id_attachfile") 'response.write "<br>"&id_infonews&"bb" id_attachs=id_attachs+1 else id_attachs=1 end if 'response.write "<br>"&id_attachs&"bb" sqldata="insert into info_attach(id_attachfile,id_member,nattachfile,datetimestamp,id_status,numreviews,filename) values('"&id_attachs&"','"&id_member&"','"&attacttxt&"','"&date_mo&"','1','0','0')" 'sqldata="update info_news set id_member='"&id_member&"',datetimestamp='"&date_mo&"',id_infonews='"&id_infonewss&"',infonews='"&mmnews&",id_status="1"' where id_contact='"&id&"'" 'response.write sqldata set orsdata=server.createobject("adodb.recordset") orsdata.open sqldata,conn,1,3 'end if response.write "<meta http-equiv='refresh' content ='0;url=index.asp'>" %>