File Manager
Back to List
| Current Directory: ~/
Editing: change_resfa.asp
Full path: C:\ict\ICT\change_resfa.asp
Permissions: rwx
Write test: File appears not directly writable
Current process identity: IIS APPPOOL\DefaultAppPool
<!--#include file="inc_cache_control.asp"--> <!--#include file="inc_access_control.asp"--> <!--#include file="chk_login.asp"--> <% '***************************************************************** 'session("tb_name")="student" 'id_stu=request("id_stu") %> <!--#include file="chk_permission.asp"--> <% '***************************************************************** 'if session("tb_preview") <> 1 and session("tb_edit")<>1 or session("id_stu1") = id_stu then '���Է��� �����㹰ҹ ��� ����Ңͧ�������ͧ pern=session("username") per="2" tb="research" sqlnc="select * from tb_permission where id_staff='"&pern&"' and tb_edit='"&per&"' and tb_name='"&tb&"'" set orsnc=server.createobject("adodb.recordset") orsnc.open sqlnc,conn,1,3 if not orsnc.eof then %> <html> <meta http-equiv="Content-Type" content="text/html; charset=windows-874"></HEAD> <body> <% id=request("id") idc=request("idc") sqlcheck="select * from attachment_res where id_attach='"&id&"'" set orscheck=server.createobject("adodb.recordset") orscheck.open sqlcheck,conn,1,3 if not orscheck.eof then id_typeattach=orscheck("id_typeattach") if id_typeattach=1 then id_typeattach=2 elseif id_typeattach=2 then id_typeattach=3 elseif id_typeattach=3 then id_typeattach=1 end if end if sqlupload="update attachment_res set id_typeattach='"&id_typeattach&"' where id_attach='"&id&"'" set orsupload = Server.CreateObject("adodb.recordset") response.write sqlupload orsupload.open sqlupload,conn,1,3 'response.write "aaa"&id_stu %> <meta http-equiv="refresh" content ="0;url=attachment_file.asp?id=<%=idc%>"> Upload Complete... </body> </html> <% 'else '���Է� 'response.write "<tr><td colspan=3><center>�س������Է����� �س���ѵԹ��" 'response.write "<meta http-equiv=refresh content =4;url=javascript:history.back();>" '���Է� end if '���Է� %>