File Manager

<%
		  pern=session("username")
		  per="2"
		  tb="research"
		  sqlnc="select * from tb_permission where id_staff='"&pern&"' and tb_edit='"&per&"' and tb_name='"&tb&"'"
		  set orsnc=server.createobject("adodb.recordset")
		  orsnc.open sqlnc,conn,1,3
				if not orsnc.eof then
		  %>
<%

status_res_name=request.form("status_name")

set orscr=server.createobject("adodb.recordset")
	 sqlcr="select * from status_research"
	 orscr.open sqlcr,Conn,1,3
	 if not orscr.eof then
	orscr.movelast
	a=orscr("id_status_res")
	'do while not orscr.eof
	if a="" then
	a=0
end if
	a=a+1
			'response.write "<tr><td>"&orscr("id_capital_res")&"<td>"&orscr("capital_res")
	'	orscr.movenext
	'	loop
		end if
		  
		  
date_mo=now
username=session("username")
sqldata="insert into status_research(username,id_status_res,date_mo,status_res_name)  values('"&username&"','"&a&"','"&date_mo&"','"&status_res_name&"')"
'  response.write sqldata

set orsdata = Server.CreateObject("adodb.recordset")
 sqlcheck="select * from status_research where status_res_name='"&status_res_name&"'"
 set orscheck=server.createobject("adodb.recordset")
 orscheck.open sqlcheck,conn,1,3
 if orscheck.eof then
 orsdata.open sqldata,conn,1,3
'response.write sqldata
%>
<SCRIPT LANGUAGE="JavaScript">
<%
		response.write "alert('�ѹ�֡�����Ź�����º��������');"
		response.write "window.location.href='status_res.asp';"
'response.write "<meta http-equiv='refresh' content ='3;url=status_res.asp'>"
%>
		-->
		</SCRIPT>
		<%
else
%>
<SCRIPT LANGUAGE="JavaScript">
<%

response.write "alert('�ѹ�֡�����ū��++ ��ҹ��ѹ�֡�����Ź�������');"
		response.write "window.location.href='status_res.asp';"
%>
		-->
		</SCRIPT>
		<%
'response.write "�����ū�� "
'response.write "<meta http-equiv='refresh' content ='7;url=index.asp'>"
end if
else
		response.write "window.location.href='index.html';"
end if

File Manager

Editing: add_status_res.asp.bak