File Manager
Back to List
| Current Directory: ~/
Editing: add_reportprogress_res.asp
Full path: C:\ict\ICT\add_reportprogress_res.asp
Permissions: rwx
Write test: File appears not directly writable
Current process identity: IIS APPPOOL\DefaultAppPool
<!--#INCLUDE FILE="ConnectDB.asp"--> <!--#include file="chk_login.asp"--> <% pern=session("username") per="2" tb="research" sqlnc="select * from tb_permission where id_staff='"&pern&"' and tb_edit='"&per&"' and tb_name='"&tb&"'" set orsnc=server.createobject("adodb.recordset") orsnc.open sqlnc,conn,1,3 if not orsnc.eof then %> <% id=request.form("id") id_status_res=request.form("id_status_res") d_report=request.form("d_report") m_report=request.form("m_report") y_report=request.form("y_report") date_mo=now username=session("username") sqldata="insert into reportprogress_res(username,date_mo,id_status_res,d_report,m_report,y_report,id_contact) values('"&username&"','"&date_mo&"','"&id_status_res&"','"&d_report&"','"&m_report&"','"&y_report&"','"&id&"')" '' response.write sqldata set orsdata = Server.CreateObject("adodb.recordset") sqlcheck="select * from reportprogress_res where id_contact='"&id&"' and id_status_res='"&id_status_res&"'" set orscheck=server.createobject("adodb.recordset") orscheck.open sqlcheck,conn,1,3 if orscheck.eof then orsdata.open sqldata,conn,1,3 '���㹵��ҧ research �������ش���·���������ʶҹ� sqlup="select * from reportprogress_res where id_contact='"&id&"'" set orsup=server.createobject("adodb.recordset") orsup.open sqlup,conn,1,3 if not orsup.eof then orsup.movelast sql12="update research set username_status='"&username&"',datemo_status='"&date_mo&"',id_status_res='"&orsup("id_status_res")&"',ytime_end='"&y_report&"',mtime_end='"&m_report&"',dtime_end='"&d_report&"' where id_contact='"&id&"'" set ors12=server.createobject("adodb.recordset") ors12.open sql12,conn,1,3 'response.write sql12 end if %> <SCRIPT LANGUAGE="JavaScript"> <% response.write "alert('�ѹ�֡�����Ź�����º��������');" response.write "window.location.href='reportprogress_res_form.asp?id="&id&"';" %> --> </SCRIPT> <% else %> <SCRIPT LANGUAGE="JavaScript"> <% response.write "alert('�ѹ�֡�����ū��++ ��ҹ��ѹ�֡�����Ź�������');" response.write "window.location.href='reportprogress_res_form.asp?id="&id&"';" %> --> </SCRIPT> <% ''response.write "�����ū�� " ''response.write "<meta http-equiv='refresh' content ='7;url=index.asp'>" end if %><% else %> <SCRIPT LANGUAGE="JavaScript"> <% response.write "window.location.href='index.html';" %> --> </SCRIPT> <% end if %>