File Manager
Back to List
| Current Directory: ~/
Editing: Copy of save_edit_letter.asp
Full path: C:\ict\ICT\Copy of save_edit_letter.asp
Permissions: rwx
Write test: File appears not directly writable
Current process identity: IIS APPPOOL\DefaultAppPool
<!--#INCLUDE FILE="ConnectDB.asp"--> <!--#include file="chk_login.asp"--> <% pern=session("username") per="2" tb="letterin" sqlnc="select * from tb_permission where id_staff='"&pern&"' and tb_edit='"&per&"' and tb_name='"&tb&"'" set orsnc=server.createobject("adodb.recordset") orsnc.open sqlnc,conn,1,3 if not orsnc.eof then %> <% id_typeletin=request.form("id_typeletin") id_letter=request.form("id_letter") id_sent=request.form("id_sent") dletter=request.form("dletter") mletter=request.form("mletter") yletter=request.form("yletter") mreceive=request.form("mreceive") yreceive=request.form("yreceive") dreceive=request.form("dreceive") originletter=request.form("originletter") titleletter=request.form("titleletter") toname=request.form("toname") wordding=request.form("wordding") forsum=request.form("forsum") fromname=request.form("fromname") directorcommand=request.form("directorcommand") ycommand=request.form("ycommand") dcommand=request.form("dcommand") mcommand=request.form("mcommand") position_fn=request.form("position_fn") id_itletter=request.form("id_itletter") statusletter="1" if dreceive=1 then dreceive="01" elseif dreceive=2 then dreceive="02" elseif dreceive=3 then dreceive="03" elseif dreceive=4 then dreceive="04" elseif dreceive=5 then dreceive="05" elseif dreceive=6 then dreceive="06" elseif dreceive=7 then dreceive="07" elseif dreceive=8 then dreceive="08" elseif dreceive=9 then dreceive="09" end if if mreceive=1 then mreceive="01" elseif mreceive=2 then mreceive="02" elseif mreceive=3 then mreceive="03" elseif mreceive=4 then mreceive="04" elseif mreceive=5 then mreceive="05" elseif mreceive=6 then mreceive="06" elseif mreceive=7 then mreceive="07" elseif mreceive=8 then mreceive="08" elseif mreceive=9 then mreceive="09" end if dbreceive=yreceive&""&mreceive&""&dreceive dcreate=now usercreate=session("username") sqldata="update letterin set id_sent='"&id_sent&"',dletter="&dletter&",mletter="&mletter&",yletter="&yletter&",mreceive="&mreceive&",dreceive="&dreceive&",yreceive="&yreceive&",originletter='"&originletter&"',titleletter='"&titleletter&"',toname='"&toname&"',wordding='"&wordding&"',forsum='"&forsum&"',fromname='"&fromname&"',directorcommand='"&directorcommand&"',ycommand="&ycommand&",dbreceive='"&dbreceive&"',id_itletter='"&id_itletter&"' ,dcommand="&dcommand&",mcommand="&mcommand&",position_fn='"&position_fn&"',dedit='"&dcreate&"',useredit='"&usercreate&"',id_typeletin="&id_typeletin&" where id_letter='"&id_letter&"'" set orsdata=server.createobject("adodb.recordset") orsdata.open sqldata,conn,1,3 'response.write sqldata %> <SCRIPT LANGUAGE="JavaScript"> <% response.write "alert('�ѹ�֡���������º����');" %> </SCRIPT> <% response.write "<meta http-equiv='refresh' content ='0;url=detail_letterin.asp?id="&id_letter&"'>" 'else %> <SCRIPT LANGUAGE="JavaScript"> <% 'response.write"alert('�ѹ�֡�����ū��++ ��ҹ��ѹ�֡�����Ź�������');" 'response.write "window.location.href='indexletterin.asp';" %> --> </SCRIPT> <% 'response.write "�����ū�� " 'response.write "<meta http-equiv='refresh' content ='7;url=index.asp'>" 'end if %><% else %> <SCRIPT LANGUAGE="JavaScript"> <% response.write "window.location.href='index.html';" %> --> </SCRIPT> <% end if %>