File Manager
Back to List
| Current Directory: ~/
Editing: addpic_stu.asp
Full path: C:\ict\ICT\addpic_stu.asp
Permissions: rwx
Write test: File appears not directly writable
Current process identity: IIS APPPOOL\DefaultAppPool
<!--#include file="inc_cache_control.asp"--> <!--#include file="inc_access_control.asp"--> <!--#include file="chk_login.asp"--> <% '***************************************************************** session("tb_name")="student" id_stu=request("id_stu") %> <!--#include file="chk_permission.asp"--> <% '***************************************************************** if session("tb_preview") <> 1 and session("tb_edit")<>1 or session("id_stu1") = id_stu then '���Է��� �����㹰ҹ ��� ����Ңͧ�������ͧ %> <html> <meta http-equiv="Content-Type" content="text/html; charset=windows-874"></HEAD> <body> <% 'response.write session("id_res_up") id_stu=session("id_stu") strMessage = Request.QueryString ("msg") '...................... sqlch="select id_stu,pic_stu from student where id_stu='"&id_stu&"'" set orsch=server.createobject("adodb.recordset") orsch.open sqlch,conn,1,3 chf=id_stu+".jpg" if orsch("pic_stu")=chf then '��á��������ͧ cfile �դ���� 0 dim fs,f set fs=server.createobject("scripting.filesystemobject") 'set f=fs.getfile(server.mappath("command/"&id&".pdf") set f=fs.getfile ("C:\ict\ICT\pic_stu\"&id_stu&".jpg") f.delete set f=nothing set fs=nothing end if dim fso set fso=createobject("scripting.filesystemobject") fso.movefile server.mappath("pic_stu/"&strMessage&""), server.mappath("pic_stu/"&id_stu&".jpg") 'response.write (server.mappath("command/00Final.pdf")) 'cfile="in-"&idl+".pdf" '...................... response.write "up.........."&chf&" /"&id_stu sql_check="select * from student where id_stu='"&id_stu&"'" set ors_check=server.createobject("adodb.recordset") ors_check.open sql_check,conn,1,3 if not ors_check.eof then sqlupload="update student set pic_stu='"&chf&"' where id_stu='"&id_stu&"'" set orsupload = Server.CreateObject("adodb.recordset") response.write sql_upload orsupload.open sqlupload,conn,1,3 response.write "aaa"&id_stu end if %> <meta http-equiv="refresh" content ="0;url=detail_stu.asp?id_stu=<%=id_stu%>"> Upload Complete... </body> </html> <% else '���Է� response.write "<tr><td colspan=3><center>�س������Է����� �س���ѵԹ��" response.write "<meta http-equiv=refresh content =4;url=javascript:history.back();>" '���Է� end if '���Է� %>