File Manager
Back to List
|
Up to Parent Directory
| Current Directory: ~/info4stu
Editing: info4stu/download_att.asp
Full path: C:\ict\ICT\info4stu\download_att.asp
Permissions: rwx
Write test: File appears not directly writable
Current process identity: IIS APPPOOL\DefaultAppPool
<!--#INCLUDE FILE="ConnectDB.asp"--> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=windows-874" /> <title>��ǹ���Ŵ </title> </head> <body> <% 'ipclient=request.servervariables("remote_addr") 'response.write ipclient 'if ipclient<>"" then ' pern=session("username") ' pern=1 ' if pern<>"" then id=request("idatt") sql="select * from info_attach where id_attachfile='"&id&"'" set ors=server.createobject("adodb.recordset") ors.open sql,conn,1,3 if not ors.eof then 'ors.movelast hits=ors("numreviews") 'if hits="0" then 'hits=0 'end if hitc=hits+1 'id_contact=ors("id_contact") 'datetimeread=now 'sqla="select * from res_checkread" 'set orsa=server.createobject("adodb.recordset") 'orsa.open sqla,conn,1,3 'if not orsa.eof then ' orsa.movelast ' id_read=orsa("id_read") ' if id_read="" then ' id_read=1 ' else ' id_read=cint(id_read)+1 ' end if 'end if ' sqlb="insert into res_checkread(id_read,ipclient,datetimeread,id_contact,id_attach) values ("&id_read&",'"&ipclient&"','"&datetimeread&"','"&id_contact&"',"&id&")" ' set orsb = Server.CreateObject("adodb.recordset") ' orsb.open sqlb,conn,1,3 ' response.write sqlb ' usercreate=session("username") sqldata="update info_attach set numreviews='"&hitc&"' where id_attachfile='"&id&"'" set orsdata=server.createobject("adodb.recordset") orsdata.open sqldata,conn,1,3 'response.write sqldata response.redirect "upload/"&ors("filename")%> <meta http-equiv="refresh" content ="0;url=index.asp"> <% end if 'else 'response.write "no ip" 'response.redirect ("http://bsri.swu.ac.th") 'end if 'ors.close 'orsdata.close conn.close %> </body> </html>