File Manager
Back to List
|
Up to Parent Directory
| Current Directory: ~/research
Editing: research/edit_res.asp
Full path: C:\ict\ICT\research\edit_res.asp
Permissions: rwx
Write test: File appears not directly writable
Current process identity: IIS APPPOOL\DefaultAppPool
<head> <meta http-equiv="Content-Type" content="text/html; charset=windows-874"> </head> <!--#INCLUDE FILE="cksession.asp"--> <!--#INCLUDE FILE="Connectdb.asp"--> <script language="javascript"> function Dosubmit(){ if(document.all.head_news.value!=''&& document.all.detail.value!=''&& document.all.url.value!=''&& document.all.name_post.value!=''&& document.all.tel.value!=''&& document.all.email.value!=''){ }else { alert('��͡���������ú���¹Ш�� '); return false; } } </script> <form name="form1" Action = "save_edit_res.asp" method="post" onsubmit="return Dosubmit();"> <script language="JavaScript1.2" src="utility.js" type='text/javascript'></script> <% dim ors id_res=request.querystring("search_id") session("id_res_up")=id_res 'response.write session("id_res_up") set ors=server.createobject("adodb.recordset") sqlmark="select * from search_th_ms where search_id="& id_res &" " ors.open sqlmark,Conn,1,3 %> <div align="center"><strong>�����������´�ҹ�Ԩ��</strong></div><br> <table align="center" width="75%"><tr bgcolor ="#FFFFCC"><td class='text'><font color="#660000"><strong><font size='2' face='ms sans serif'>���ʧҹ�Ԩ��</td><td><input type="text" name="search_id" readonly value=<% =ors("search_id") %>></td></tr> <% response.write "<tr><td><font color='#660000'><strong><font size='2' face='ms sans serif'>���ͧҹ�Ԩ��</td><td><textarea cols='60' name='search_title' rows='4'>"& ors("search_title") &"</textarea>" response.write "</td></tr>" response.write"<tr bgcolor =#FFFFCC><td><strong><font size='2' face='ms sans serif'>�������ҹ�Ԩ��<strong></td><td>" 'set ors_type_res=server.createobject("adodb.recordset") res_type=request("res_type") if res_type="" then res_type = ors("search_type") else res_type=request("res_type") end if 'if res_id <> 0 then sql_res="select * from search_type where type_id ="&res_type&"" set ors_res=server.createobject("ADODB.RECORDSET") ors_res.open sql_res,conn,1,3 %> <select name="search_type"> <% sql_type1="select * from search_type" set ors_type1=server.createobject("adodb.recordset") ors_type1.open sql_type1,conn,1,3 ors_type1.movefirst do while not ors_type1.eof %> <option <%if cint(ors_type1("type_id"))=cint(res_type) then%> value = <%=cint(res_type)%> selected <%else%> value = <%=ors_type1("type_id") %><%end if%>><%=ors_type1("type_nameth")%></option><% ors_type1.movenext loop%> </select> <% response.write "</td></tr>" response.write "<tr><td><font color='#660000'><strong><font size='2' face='ms sans serif'>�����</td><td ><textarea cols='35' rows='3' name='search_aut' >"& ors("search_aut") &"</textarea></td></tr>" response.write "<tr bgcolor =#FFFFCC><td><font color='#660000'><strong><font size='2' face='ms sans serif'>����� / ����֡��</td><td ><textarea rows='1' cols='60' name='search_adv'>"& ors("search_adv") &"</textarea></td></tr>" response.write"<tr bgcolor =#FFFFCC><td><strong><font size='2' face='ms sans serif'>����Ңͧ�ҹ�Ԩ��</strong></td><td>" 'set ors_type_res=server.createobject("adodb.recordset") res_aff=request("res_aff") if res_aff="" then res_aff = ors("search_aff") else res_aff=request("res_aff") end if 'if res_id <> 0 then sql_aff="select * from search_source_type where source_id ="&res_aff&"" set ors_aff=server.createobject("ADODB.RECORDSET") ors_aff.open sql_aff,conn,1,3 %> <select name="search_aff"> <% sql_source="select * from search_source_type" set ors_source=server.createobject("adodb.recordset") ors_source.open sql_source,conn,1,3 ors_source.movefirst do while not ors_source.eof %> <option <%if cint(ors_source("source_id"))=cint(res_aff) then%> value = <%=cint(res_aff)%> selected <%else%> value = <%=ors_source("source_id") %><%end if%>><%=ors_source("source_nameth")%></option><% ors_source.movenext loop%> </select> <% response.write "</td></tr>" response.write "<tr><td><font color='#660000'><strong><font size='2' face='ms sans serif'>�� </td><td><input name='search_year' onkeypress='if (event.keyCode < 46 || event.keyCode >57 ) event.returnValue=false;' value ="&ors("search_year") &"></td></tr>" response.write "<tr bgcolor =#FFFFCC><td><font color='#660000'><strong><font size='2' face='ms sans serif'>�ӹǹ˹��</td><td ><input name='search_page' onkeypress='if (event.keyCode < 46 || event.keyCode >57 ) event.returnValue=false;' value="& ors("search_page") &"></td></tr>" response.write "<tr><td><font color='#660000'><strong><font size='2' face='ms sans serif'>�����������ҧ</td><td ><textarea cols='60' rows='3' name='search_sample' >"& ors("search_sample") &"</textarea></td></tr>" response.write "<tr><td><font color='#660000'><strong><font size='2' face='ms sans serif'>�Ӥ�</td><td ><textarea cols='60' rows='3' name='search_key' >"& ors("search_key") &"</textarea></td></tr>" response.write "<tr ><td><font color='#660000'><strong><font size='2' face='ms sans serif'>���Ѵ���</td><td ><input name='search_abstr' value ="& ors("search_abstr") &" >[<a href =abstr_form.asp?check=1>Upload New File</a>]" sql_up="select * from temp_upload where search_id="&id_res&"" set ors_up =server.createobject("adodb.recordset") ors_up.open sql_up,conn,1,3 if not ors_up.eof then search_thai=ors_up("abstr") 'response.write "dddd"&ors_up("abstr")&"88888" if search_thai <> " " then search_abs=ors_up("abstr") session("search_abs")=search_abs response.write " <font size='2' face='ms sans serif'>New File [<a href = "&search_abs&">"&search_abs&"</a>]" else response.write "<font size='2' face='ms sans serif'> New File [None]" end if 'else 'response.write search_abs 'response.write "<br>"&session("search_abs") end if response.write "</td></tr>" response.write "<tr bgcolor =#FFFFCC><td><font color='#660000'><font size='2' face='ms sans serif'><strong>Abstract</td><td ><input type='text' name='search_abstr_eng' value ="& ors("search_abstr_eng") &" >[<a href =abstr_form.asp?check=2>Upload New File</a>]" sql_up="select * from temp_upload where search_id="&id_res&" " set ors_up =server.createobject("adodb.recordset") ors_up.open sql_up,conn,1,3 if not ors_up.eof then search_eng=ors_up("abstr_eng") 'response.write search_eng if search_eng <>" " then search_abstr=ors_up("abstr_eng") session("abs_eng")=search_abstr response.write "<font size='2' face='ms sans serif'> New File [<a href = "&search_abstr&">"&search_abstr&"</a>]" else response.write "<font size='2' face='ms sans serif'> New File [None]" end if response.write abs_eng end if response.write "</td></tr>" response.write "<tr><td colspan='2'><font color='#0066FF'><strong><a href=addtotemp_edit.asp?search_id="&id_res&"><font size='2' face='ms sans serif'>++����-ź ����ͧ����Ѵ++</td></tr>" session("searchid")=id_res %> <table width="75%" border="0" cellpadding="0" cellspacing="0" align ="center"> <tr bgcolor="#660000"> <td><div align="center"><strong><font color="#CCFFCC"><font size='2' face='ms sans serif'>��������ͧ����Ѵ</font></strong></div></td> <td><div align="center"><strong><font color="#CCFFCC"><font size='2' face='ms sans serif'>��������ͧ����Ѵ</font></strong></div></td> <td><div align="center"><strong><font color="#CCFFCC"><font size='2' face='ms sans serif'>ź</font></strong></div></td></tr> <%'response.write sqlselectall response.write "<tr><td>���</td></tr>" '==================�ʴ��ͧ����͡�ҡ�================================ set ors_mea=server.createobject("adodb.recordset") sql_mea="select * from measurement_ms where meas_ref ="&id_res&"" ors_mea.open sql_mea,conn,1,3 if not ors_mea.eof then ors_mea.movefirst do while not ors_mea.eof valuecolor = colorv mod 2 if valuecolor = 0 then vcolor = "#cccccc" else vcolor = "#FFFFCC" end if response.write "<tr><td align='center'><A href = detail_mea.asp?meas_id="&ors_mea("meas_id")&"><font size='2' face='ms sans serif'>"& ors_mea("meas_id") &"</a></td><td><font size='2' face='ms sans serif'>"&ors_mea("meas_name")&"</td>" response.write "<td><div align='center'><a href='clear_ref_meas.asp?meas_id="&ors_mea("meas_id")&"'><img src='picture/i.p.delete.gif' width='11' height='12' border='0'></a><t/d></tr>" ors_mea.movenext colorv=colorv+1 loop ors_mea.close set ors_mea=nothing 'else 'response.write "</table>" end if '==================================================================== sqlselectall="select * from temp where search_id = "&id_res&" order by meas_id " set orsselectall=server.createobject("adodb.recordset") orsselectall.open sqlselectall,conn,1,3 response.write "<tr><td>����</td></tr>" '=========================�ͧ����====================================================== if not orsselectall.eof then colorv=1 orsselectall.movefirst 'on error resume next do while not orsselectall.eof valuecolor = colorv mod 2 if valuecolor = 0 then vcolor = "#ffffff" else vcolor = "#FFFFCC" end if response.write"<tr bgcolor ="& vcolor &"><td width='16%'><div align='center'><A href = detail_mea.asp?meas_id="&orsselectall("meas_id")&">"&orsselectall("meas_id")&"</td>" 'response.write"<td>"&orsselectall("meas_id")&"</td></tr>" measids=orsselectall("meas_id") 'response.write measids sql_1= " select * from measurement_ms where meas_id= " & measids & " " ' response.write sql_1 set ors_1=server.createobject("adodb.recordset") ors_1.open sql_1,conn,1,3 'name=ors_1("meas_name") ' response.write name ' response.write sql_1 response.write "<td>"&ors_1("meas_name")&"</td>" response.write "<td><div align='center'><a href='del_temp_edit.asp?meas_id="&measids&"'><img src='picture/i.p.delete.gif' width='11' height='12' border='0'></a><t/d></tr>" orsselectall.movenext colorv=colorv+1 loop end if response.write "</table>" 'ors.Open sqlmark, conn, 1, 3 On Error Resume Next ors.Close Conn.Close ' '<SCRIPT LANGUAGE="JavaScript"> '<!-- ' form1.submit(); '//--> '</SCRIPT> 'response.write "<a href=save_edit_res.asp?search_id="&id_res&">�ѹ�֡</a>" %> <div align ="center"><input type="submit" value="�ѹ�֡"></div> </FORM>