File Manager
Back to List
| Current Directory: ~/
Editing: add_exitexam_form.asp
Full path: C:\ict\ICT\add_exitexam_form.asp
Permissions: rwx
Write test: File appears not directly writable
Current process identity: IIS APPPOOL\DefaultAppPool
<!--#include file="chk_permission.asp"--> <!--#include file="inc_cache_control.asp"--> <!--#include file="inc_access_control.asp"--> <!--#include file="chk_login.asp"--> <script language="javascript"> function doSubmit() { if( document.form3.date_pass.value == "" ) { alert("��سҡ�͡�ѹ������ͺ��ҹ") document.form3.date_pass.focus() return false; } if( document.form3.id_exitexam_type.value == "00" ) { alert("��س����͡���͡�ѡ�з���ͺ��ҹ") document.form3.id_progress_report.focus() return false; } } </script> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html><!-- InstanceBegin template="/Templates/ict.dwt" codeOutsideHTMLIsLocked="false" --> <head> <!-- InstanceBeginEditable name="doctitle" --> <title>�к����ʹ�����͡�ú�����</title> <!-- InstanceEndEditable --> <meta http-equiv="Content-Type" content="text/html; charset=windows-874"> <!-- InstanceBeginEditable name="head" --><!-- InstanceEndEditable --> <link href="bsri2006.css" rel="stylesheet" type="text/css"> <link rel="stylesheet" href="./css/icomoon.css"> <link rel="stylesheet" href="./css/style.css"> <link href="image/favicon.ico" rel="shortcut icon" type="image/x-icon"> <link href="image/favicon.ico" rel="shortcut icon" type="image/x-icon"> <link href="./css/bootstrap.min.css" rel="stylesheet"> <link href="./css/templatemo-style.css" rel="stylesheet"> <link type="text/css" href="css/ui-lightness/jquery-ui-1.8.10.custom.css" rel="stylesheet" /> <script type="text/javascript" src="js/jquery-1.4.4.min.js"></script> <script type="text/javascript" src="js/jquery-ui-1.8.10.offset.datepicker.min.js"></script> <script type="text/javascript"> $(function () { var d = new Date(); var toDay = d.getDate() + '/' + (d.getMonth() + 1) + '/' + (d.getFullYear() + 543); // �óյ�ͧ�����軯ԷԹŧ��ҡ���� 1 �ѹ���˹�� ����������� Code ����÷Ѵ��ҹ��ҧ���¤�Ѻ (1 �ش = 1 ��ԷԹ) $("#datepicker-th").datepicker({ dateFormat: 'dd/mm/yy', isBuddhist: true, defaultDate: toDay, dayNames: ['�ҷԵ��', '�ѹ���', '�ѧ���', '�ظ', '����ʺ��', '�ء��', '�����'], dayNamesMin: ['��.','�.','�.','�.','��.','�.','�.'], monthNames: ['���Ҥ�','����Ҿѹ��','�չҤ�','����¹','����Ҥ�','�Զع�¹','�á�Ҥ�','�ԧ�Ҥ�','�ѹ��¹','���Ҥ�','��Ȩԡ�¹','�ѹ�Ҥ�'], monthNamesShort: ['�.�.','�.�.','��.�.','��.�.','�.�.','��.�.','�.�.','�.�.','�.�.','�.�.','�.�.','�.�.']}); $("#datepicker-en").datepicker({ dateFormat: 'dd/mm/yy'}); $("#inline").datepicker({ dateFormat: 'dd/mm/yy', inline: true }); }); </script> </head> <body leftmargin="0" topmargin="0" marginwidth="0" marginheight="0"> <table width="100%" border="0"> <tr> <td colspan="2"><div align="right"><img src="Image/head1.gif" width="800" height="61"></div></td> </tr> <tr> <td colspan="2" background="Image/bghead1.gif"><div align="right"><font size="2" face="MS Sans Serif, Tahoma, sans-serif"><strong>| <a href="http://www.swu.ac.th" target=_blank>SWU</a> | <a href="http://bsri.swu.ac.th" target=_blank>BSRI</a> |<a href="chaPW.asp"><strong>Change Password</strong></a>|<a href="log_out.asp">Log Out </a></strong></font>|</div></td> </tr> <tr> <td width="20%" align="left" valign="top" bgcolor="#FFCCCC"><!-- InstanceBeginEditable name="EditRegion5" --><!--#include file="chk_menu.asp"--><!-- InstanceEndEditable --></td> <td width="77%" align="left" valign="top"><!-- InstanceBeginEditable name="EditRegion3" --> <table width="100%" border="0" cellspacing="0"> <tr> <td width="892" align="left" valign="top"> <% '***************************************************************** session("tb_name")="student" %> <% id_stu=request("id_stu") 'response.write session("id_stu1") &"aaa" 'response.write "bbb"&id_stu '***************************************************************** 'if session("tb_preview") =2 or session("id_stu1") = id_stu then '���Է��� �����㹰ҹ ��� ����Ңͧ�������ͧ pern=session("username") per="2" tb="student" sqlnc="select * from tb_permission where id_staff='"&pern&"' and tb_edit='"&per&"' and tb_name='"&tb&"'" set orsnc=server.createobject("adodb.recordset") orsnc.open sqlnc,conn,1,3 %> <div align="left"> <%'if session("tb_edit") = 2 then %> <%'end if%><br> <table border="0" align="center" cellpadding="0" cellspacing="0" width="100%"> <tr > <td> <table border=0 width="100%"> <% id_stu=request("id_stu") if id_stu="" then id_stu=session("id_stu1") end If sql_data="select * from student where id_stu='"&id_stu&"' " set ors_data=server.createobject("adodb.recordset") ors_data.open sql_data,conn,1,3 if not ors_data.eof then %> <tr> <td colspan=3> <div class="col-1"> <div class="templatemo-content-widget white-bg"> <div class="media"> </div> <div class="media-body"> <h2 class="media-heading text-uppercase"><%=id_stu%>  <%=ors_data("name_stu")%>   <%=ors_data("sur_stu")%> (<%=ors_data("name_eng")%>  <%=ors_data("sur_eng")%>)</h2><p> <% id_status_edu=ors_data("id_status_edu") set ors3=server.createobject("adodb.recordset") sql3="select * from status_edu where id_status_edu='"&id_status_edu&"'" ors3.open sql3,Conn,1,3 if not ors3.eof then response.write ors3("status_edu") end if %> <% id_stugroup=ors_data("id_stugroup") sql_all="select * from student_group where id_stugroup='"&ors_data("id_stugroup")&"' " set ors_all=server.createobject("adodb.recordset") ors_all.open sql_all,Conn,1,3 if not ors_all.eof Then id_curriculum=ors_all("id_curriculum") id_type_curri=ors_all("id_type_curri") id_major=ors_all("id_major") response.write "" sql_curri="select * from curriculum where id_curriculum='"&ors_all("id_curriculum")&"'" set ors_curri=server.createobject("adodb.recordset") ors_curri.open sql_curri,conn,1,3 if not ors_curri.eof then response.write ors_curri("curriculum_full")&" " end if sqlt="select * from type_curriculum where id_type_curri='"&ors_all("id_type_curri")&"'" set orst=server.createobject("adodb.recordset") orst.open sqlt,conn,1,3 if not orst.eof Then response.write orst("type_curri_th") end if response.write " ��� "&ors_all("no_stugroup")&" " id_major=ors_all("id_major") sql_major="select * from major where id_major='"&id_major&"'" set ors_major=server.createobject("adodb.recordset") ors_major.open sql_major,conn,1,3 if not ors_major.eof then response.write ors_major("major_th") end if end if %> </td></tr> <% response.write "<tr >" '���ͻ�ԭ�ҹԾ��� id_thesis=request.form("id") sqlt="select * from thesis where id_thesis='"&id_thesis&"'" set orst=server.createobject("adodb.recordset") orst.open sqlt,conn,1,3 if not orst.eof then 'response.write "<td>"&orst("id_thesis") 'response.write "<td><strong>���ͻ�ԭ�ҹԾ���::<strong>"&orst("thesis_th")&"<br>Thesis name::"&orst("thesis_eng") Else 'response.write "<td>����բ�����"&id_thesis End if %> <tr><td align=right> <form name="form12" method="post" action="detail_stu.asp"> <input type="hidden" name="id_thesis" value=<%=id_thesis%>> <input type="hidden" name="id_stu" value=<%=id_stu%>> <div class="col-xs-12"> <button class="btn-oth" type="submit" role="button" style="margin-left:10px;">˹���á�����Ź��Ե</button></div> </form> </td></tr> </table> <div class="templatemo-content-widget orange-bg"> <div class="media"> <div class="media-body"> <h2 class="media-heading text-uppercase">��§ҹ����ͺ��ҹ��Է���Ҿ�����ѧ���</h2> </div> </div> </div> <tr ><td > <form name="form3" method="post" action="add_exitexam.asp" onsubmit="return doSubmit()"> <div class="table-responsive"> <table class="table table-striped table-bordered"> <tr ><td align=right>���͡�ѡ�з���ͺ��ҹ<font color="#ff0000">*</font> <td> <% sql_round="select * from rp_exitexam_type where id_status='1' order by id_exitexam_type" Set ors_round=server.createobject("adodb.recordset") ors_round.open sql_round,conn,1,3 'Response.write sql_round If Not ors_round.eof Then %> <select name="id_exitexam_type" id="id_exitexam_type" style="font-size:16px"> <option value="00">�ѡ�з���ͺ��ҹ</option> <% ors_round.movefirst 'Response.write ors_round("id_progress_report") do while not ors_round.eof %> <option value=<%=ors_round("id_exitexam_type")%>><%=ors_round("exitexam_type")%> </option> <% ors_round.movenext loop %> </select> <% End if %> <tr ><td align=right width=20%>�ѹ����ͺ��ҹ<font color="#ff0000">*</font><td align=left> <input type="text" size="15" id="datepicker-th" name="date_pass" style="font-size:16px"/>mm/dd/yyyy </tr> <tr><td><td> <input type="hidden" name="id" value=<%=id_thesis%>> <input type="hidden" name="id_stu" value=<%=id_stu%>> <div class="col-xs-12"> <button class="btn-oth" type="submit" role="button" style="margin-left:10px;" >Save</button> <!--<input type="submit" name="Submit" value="Submit" onmousedown="doSubmit();"> --> <button class="btn-oth" type="reset" name="Submit2" value="Reset">Reset</button></div> </table> </form> </table> <% end if %> </div></td> </tr> </table> <% 'else '���Է� 'response.write "<tr><td colspan=3><center>�س������Է����� �س���ѵԹ��" 'response.write "<meta http-equiv=refresh content =3;url=javascript:history.back();>" '���Է� 'end if '���Է� %> <!-- InstanceEndEditable --></td> </tr> <tr> <td colspan="2" background="Image/bghead1.gif">Contact Admin:: wassanaw@swu.ac.th tel.02-649-5000 ext 17600</td> </tr> </table> </body> <!-- InstanceEnd --></html>