File Manager

<%
		  pern=session("username")
		  per="2"
		  tb="research"
		  sqlnc="select * from tb_permission where id_staff='"&pern&"' and tb_edit='"&per&"' and tb_name='"&tb&"'"
		  set orsnc=server.createobject("adodb.recordset")
		  orsnc.open sqlnc,conn,1,3
				if not orsnc.eof then
		  %>
<%

num_term=request.form("num_term")
id_type_res=request.form("id_type_res")
id_researchr=request.form("id_researchr")
research_t=request.form("research_t")
research_e=request.form("research_e")
id_capital_res=request.form("id_capital_res")
id_type_capital_res=request.form("id_type_capital_res")
y_capital_res=request.form("y_capital_re")
d_begin=request.form("d_begin")
m_begin=request.form("m_begin")
y_begin=request.form("y_begin")
amount=request.form("amount")
d_fcontact=request.form("d_fcontact")
m_fcontact=request.form("m_fcontact")
y_fcontact=request.form("y_fcontact")
sqlall="select * from research"
set orsall=server.createobject("adodb.recordset")
orsall.open sqlall,conn,1,3
if not orsall.eof then
orsall.movelast
id_contact=orsall("id_contact")+1
end if
id_status_res="1"

id_research="0"
		  isbn_no="0"
date_mo=now
username=session("username")
sqldata="insert into research(username,date_mo,y_fcontact,m_fcontact,d_fcontact,amount,y_begin,m_begin,d_begin,y_capital,id_type_capital_res,id_capital_res,research_e,research_t,id_type_res,id_contact,id_status_res,num_term,id_research,isbn_no,id_researchr)  values('"&username&"','"&date_mo&"','"&y_fcontact&"','"&m_fcontact&"','"&d_fcontact&"','"&amount&"','"&y_begin&"','"&m_begin&"','"&d_begin&"','"&y_capital_res&"','"&id_type_capital_res&"','"&id_capital_res&"','"&research_e&"','"&research_t&"','"&id_type_res&"',"&id_contact&",'"&id_status_res&"','"&num_term&"','"&id_research&"','"&isbn_no&"','"&id_researchr&"')"
  'response.write sqldata

set orsdata = Server.CreateObject("adodb.recordset")
   sqls="insert into reportprogress_res(username,date_mo,id_status_res,id_contact,d_report,m_report) values('"&username&"','"&date_mo&"','"&id_status_res&"','"&id_contact&"','0','00')"
   set orss=server.createobject("adodb.recordset")

sqlcheck="select * from research where id_contact='"&id_contact&"'"
 set orscheck=server.createobject("adodb.recordset")
 orscheck.open sqlcheck,conn,1,3
 if orscheck.eof then
 orsdata.open sqldata,conn,1,3
 orss.open sqls,conn,1,3
'response.write sqldata
%>
<SCRIPT LANGUAGE="JavaScript">
<%
response.write "alert('�ѹ�֡���������º����');"
%>
		-->
		</SCRIPT>
		<%
		response.write "<meta http-equiv='refresh' content ='0;url=detail_research.asp?id="&id_contact&"'>"

else
%>
<SCRIPT LANGUAGE="JavaScript">
<%

response.write"alert('�ѹ�֡�����ū��++ ��ҹ��ѹ�֡�����Ź�������');"
		response.write "window.location.href='indexresearch.asp';"
%>
		-->
		</SCRIPT>
		<%
'response.write "�����ū�� "
'response.write "<meta http-equiv='refresh' content ='7;url=index.asp'>"
end if

%><%
else
%>
<SCRIPT LANGUAGE="JavaScript">
<%

response.write "window.location.href='index.html';"
		%>
		-->
		</SCRIPT>
		<%
end if

File Manager

Editing: add_research.asp.bak