File Manager

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>

<title>�к����ʹ�����͡�ú�����</title>
 
<meta http-equiv="Content-Type" content="text/html; charset=windows-874">
</title>
<%
		  pern=session("username")
		  per="2"
		  tb="lecturer"
		  sqlnc="select * from tb_permission where id_staff='"&pern&"' and tb_edit='"&per&"' and tb_name='"&tb&"'"
		  set orsnc=server.createobject("adodb.recordset")
		  orsnc.open sqlnc,conn,1,3
			'	if not orsnc.eof then
		  %>
<%
																	sqlall="select * from academic_work"
																	set orsall=server.createobject("adodb.recordset")
																	orsall.open sqlall,conn,1,3
																	if not orsall.eof then
																	orsall.movelast
																	id_aw=orsall("id_aw")+1
																	else
																	id_aw=1
																	end if
id_staff=request.form("id_staff")
month_aw=request.form("month_aw")
year_aw=request.form("year_aw")
type_aw=request.form("type_aw")
name_aw=request.form("name_aw")
title_aw=request.form("title_aw")
statusdel="1"

date_mo=now
username=session("username")
sqldata="insert into academic_work(usercreate,datecreate,id_staff,month_aw,year_aw,type_aw,name_awaw,statusdel,id_aw,title_aw)  values('"&username&"','"&date_mo&"','"&id_staff&"','"&month_aw&"',"&year_aw&","&type_aw&",'"&name_aw&"','"&statusdel&"',"&id_aw&",'"&title_aw&"')"
  'response.write sqldata

set orsdata = Server.CreateObject("adodb.recordset")
 orsdata.open sqldata,conn,1,3
%>
<SCRIPT LANGUAGE="JavaScript">
<%
response.write "alert('�ѹ�֡���������º����');"
%>
		-->
		</SCRIPT>
		<%
		response.write "<meta http-equiv='refresh' content ='0;url=detail_aw.asp?id="&id_aw&"'>"

%><%
'else
%>
<SCRIPT LANGUAGE="JavaScript">
<%

'response.write "window.location.href='index.html';"
		%>
		-->
		</SCRIPT>
		<%
'end if

File Manager

Editing: add_aw.asp.bak