File Manager
Back to List
| Current Directory: ~/
Editing: add_thesis_progress_student.asp.bak
Full path: C:\ict\ICT\add_thesis_progress_student.asp.bak
Permissions: rwx
Write test: File appears not directly writable
Current process identity: IIS APPPOOL\DefaultAppPool
<!--#include file="inc_cache_control.asp"--> <!--#include file="inc_access_control.asp"--> <!--#include file="chk_login.asp"--> <% '***************************************************************** session("tb_name")="student" %> <!--#include file="chk_permission.asp"--> <% '***************************************************************** ' if session("tb_edit") <> 1 then '���Է��� �����㹰ҹ ��� ����Ңͧ�������ͧ if session("tb_edit")=2 or session("id_stu1") = id_stu then %> <!--<form name="form1" Action = "report_thesis_progress_student_form.asp" method="post">--> <form name="form1" Action = "thesis_progress_student_list.asp" method="post"> <% id_progress_report=request.form("id_progress_report") sql_round="select * from progress_report_thesis where id_progress_report='"&progress_report&"'" Set ors_round=server.createobject("adodb.recordset") ors_round.open sql_round,conn,1,3 'Response.write sql_round If Not ors_round.eof Then year_end=ors_round("year_end") month_end=ors_round("month_end") year_begin=ors_round("year_begin") month_begin=ors_round("month_begin") End if id_thesis=request.form("id") id_stu=request.form("id_stu") 'year_end=request.form("year_end") 'year_begin=request.form("year_begin") 'month_begin=request.form("month_begin") 'month_end=Request.form("month_end") id_status="1" status_del="1" activity_name=request.form("activity_name") expect_result=request.form("id_activity1") id_table=request.form("id_table1") id_progress_report=request.form("id_progress_report") id_result="2" date_save=Date id_staff=session("id_staff1") 'id_status = request.form("id_status_lec") ' bdate_lec = request.form("bdate_lec") 'bmon_lec=request.form("bmon_lec") 'byear_lec=request.form("byear_lec") ' bd_lec=bdate_lec&"/"&bmon_lec&"/"&byear_lec 'Response.write date_save %> <% 'sql_ch="select * from thesis_plan_activity where id_stu='"&id_stu&"' and id_table='"&id_table&"' and id_activity_r='"&expect_result&"' and id_result='0' and id_status='0'" sql_ch="select * from thesis_plan_activity where id_stu='"&id_stu&"' and id_table='"&id_table&"' and id_activity_r='"&expect_result&"' order by id_activity" set ors_ch=server.createobject("adodb.recordset") ors_ch.open sql_ch,conn,1,3 if Not ors_ch.eof Then '�ա���ҧἹࡳ������� ors_ch.movelast 'If ors_ch("id_result")="0" And ors_ch("id_status")="0" Then '������ա������������������ If ors_ch("id_result")="1" or ors_ch("id_status")="2" Then sql_data="select * from thesis_plan_activity order by id_activity" set ors_data=server.createobject("adodb.recordset") ors_data.open sql_data,conn,1,3 if not ors_data.eof Then ors_data.movelast id_activity=ors_data("id_activity")+1 Else id_activity=0 End If sqldata="insert into thesis_plan_activity(id_activity,id_thesis,id_stu,date_save,id_status,month_begin, year_begin,month_end,year_end,activity_name,id_activity_r,status_del,id_progress_report,id_table,id_result) values("&id_activity&",'"&_ id_thesis&"','"&id_stu&"','"&_ date_save&"', '"&id_status&"','"&month_begin&"','"&year_begin&"','"&month_end&"','"&year_end&"','"&activity_name&"','"&expect_result&"','"&status_del&"','"&id_progress_report&"','"&id_table&"','"&id_result&"')" set orsdata = Server.CreateObject("adodb.recordset") orsdata.open sqldata,conn,1,3 'response.write sqldata Else '�繡ó���蹷ءó� �ա�úѹ�֡��¡�ù�������������ѹ id_activity=ors_ch("id_activity") %> <SCRIPT LANGUAGE="JavaScript"> <% response.write "alert('�Ԩ������� ���������ҧ���Թ���/����Թ�������������');" %> </SCRIPT> <% End if Else '����ա�����ҧἹ������ 'id_activity=ors_ch("id_activity") 'sql_ch1="select * from thesis_plan_activity where id_stu='"&id_stu&"' and id_table='"&id_table&"' and id_activity_r='"&expect_result&"'" 'set ors_ch1=server.createobject("adodb.recordset") 'ors_ch1.open sql_ch1,conn,1,3 'response.write sql_ch1 'if ors_ch1.eof Then '����� sql_data="select * from thesis_plan_activity order by id_activity" set ors_data=server.createobject("adodb.recordset") ors_data.open sql_data,conn,1,3 if not ors_data.eof Then ors_data.movelast id_activity=ors_data("id_activity")+1 Else id_activity=0 End If sql_ch1="insert into thesis_plan_activity(id_activity,id_thesis,id_stu,date_save,id_status,month_begin, year_begin,month_end,year_end,activity_name,id_activity_r,status_del,id_progress_report,id_table,id_result) values("&id_activity&",'"&_ id_thesis&"','"&id_stu&"','"&_ date_save&"', '"&id_status&"','"&month_begin&"','"&year_begin&"','"&month_end&"','"&year_end&"','"&activity_name&"','"&expect_result&"','"&status_del&"','"&id_progress_report&"','"&id_table&"','"&id_result&"')" set ors_ch1 = Server.CreateObject("adodb.recordset") ors_ch1.open sql_ch1,conn,1,3 'response.write sql_ch1 'Else '�ҧ���͡ 'response.write sql_ch1 %> <SCRIPT LANGUAGE="JavaScript"> <% response.write "alert('�к���ѹ�֡�Ԩ��������ҹ�к����º��������');" %> </SCRIPT> <% 'End If End if response.write id_activity %> <input type="hidden" name="id_stu" value=<%=id_stu%>> <input type="hidden" name="id_activity" value=<%=id_activity%>> <script type="text/javascript"> document.form1.submit(); </script> <% 'response.write "<meta http-equiv='refresh' content ='0;url=thesis_progress_student.asp?id_stu="&id_stu&"'>" 'end if 'set conn = nothing %> </FORM> <% else '���Է� response.write "<tr><td colspan=3><center>�س������Է����� �س���ѵԹ��" response.write "<meta http-equiv=refresh content =3;url=javascript:history.back();>" '���Է� end if '���Է� %>