File Manager
Back to List
| Current Directory: ~/
Editing: add_student_group.asp
Full path: C:\ict\ICT\add_student_group.asp
Permissions: rwx
Write test: File appears not directly writable
Current process identity: IIS APPPOOL\DefaultAppPool
<!--#include file="inc_cache_control.asp"--> <!--#include file="inc_access_control.asp"--> <!--#include file="chk_login.asp"--> <% '***************************************************************** session("tb_name")="student" %> <!--#include file="chk_permission.asp"--> <% '***************************************************************** if session("tb_edit") <> 1 then '���Է��� �����㹰ҹ ��� ����Ңͧ�������ͧ %> <form name="form1" Action = "" method="post"> <% date0=request.form("date0") bdate_stu=left(date0,2) bmon_stu=mid(date0,4,2) byear_stu=right(date0,4) id_stu=request.form("id_stu") id_administor=request.form("id_administor") id_academic=request.form("academic") id_preface = request.form("preface") id_other_position=request.form("other_position") name_stu = request.form("name_stu") sur_stu = request.form("sur_stu") 'year_retire = request.form("year_retire") id_status_edu = request.form("id_status_edu") 'bdate_stu = request.form("bdate_stu") 'bmon_stu=request.form("bmon_stu") id_stugroup=session("id_stugroup") nickname=request.form("nickname") 'byear_stu=request.form("byear_stu") bd_stu=bdate_stu&"/"&bmon_stu&"/"&byear_stu %> <% sql_data="select * from student where id_stu='"&id_stu&"' " set ors_data=server.createobject("adodb.recordset") ors_data.open sql_data,conn,1,3 if not ors_data.eof then%> <SCRIPT LANGUAGE="JavaScript"> <% response.write"alert('"&id_stu&"�ѹ�֡���ʻ�Шӵ�ǫ��');" response.write "window.location.href='add_stu_form.asp';" %> </SCRIPT> <% else sqldata="insert into student(id_stu,id_administor,id_academic,id_preface,name_stu,sur_stu, id_status_edu,bdate_stu,id_other_position,id_stugroup,nickname) values('"&id_stu&"','"&_ id_administor&"','"&id_academic&"','"&_ id_preface&"', '"&name_stu&"','"&sur_stu&"','"&id_status_edu&"','"&bd_stu&"','"&id_other_position&"','"&id_stugroup&"','"&nickname&"')" set orsdata = Server.CreateObject("adodb.recordset") orsdata.open sqldata,conn,1,3 'response.write sqldata response.write "<meta http-equiv='refresh' content ='0;url=detail_stu.asp?id_stu="&id_stu&"'>" end if set conn = nothing %> </FORM> <% else '���Է� response.write "<tr><td colspan=3><center>�س������Է����� �س���ѵԹ��" response.write "<meta http-equiv=refresh content =3;url=javascript:history.back();>" '���Է��� end if '���Է� %>