File Manager
Back to List
| Current Directory: ~/
Editing: confirm_activity_register.asp.bak
Full path: C:\ict\ICT\confirm_activity_register.asp.bak
Permissions: rwx
Write test: File appears not directly writable
Current process identity: IIS APPPOOL\DefaultAppPool
<!--#include file="chk_permission.asp"--> <!--#include file="inc_cache_control.asp"--> <!--#include file="inc_access_control.asp"--> <!--#include file="chk_login.asp"--> <% id_activity=request.form("id") 'id_stu=request.form("id_stu") id_status_register="1" dcreate=now usercreate=session("username") 'sqldata="insert into letterin(id_letter,id_sent,dletter,mletter,yletter,mreceive,yreceive,dreceive,originletter,titleletter,toname,statusletter,dcreate,usercreate,id_typeletin,hitc,dbreceive,id_itletter,directorcommand,dued,duey,duemonth,duedate,dued1,id_categorylet) values('"&id_letter&"','"&id_sent&"',"&dletter&","&mletter&","&yletter&","&mreceive&","&yreceive&","&dreceive&",'"&originletter&"','"&titleletter&"','"&toname&"','"&statusletter&"','"&dcreate&"','"&usercreate&"',"&id_typeletin&",0,"&dbreceive&",'"&id_itletter&"','"&directorcommand&"','"&dued&"','"&duey&"','"&duemonth&"','"&duedate&"','"&dued1&"','"&id_categorylet&"')" 'set orsdata=server.createobject("adodb.recordset") sqlcheck1="select * from rp_activity_register where id_activity='"&id_activity&"'" set orscheck1=server.createobject("adodb.recordset") orscheck1.open sqlcheck1,conn,1,3 If Not orscheck1.eof Then orscheck1.movefirst Do While Not orscheck1.eof sqldata1="update rp_activity_register set id_status_register='0' where id_activity='"&id_activity&"'" set orsdata1 = Server.CreateObject("adodb.recordset") orsdata1.open sqldata1,conn,1,3 orscheck1.movenext Loop End if a=request.form("id_stu").count i=1 if a>0 then do while i<=a id_stu=request.form("id_stu")(i) sqlcheck="select * from rp_activity_register where id_activity='"&id_activity&"' and id_stu='"&id_stu&"'" set orscheck=server.createobject("adodb.recordset") orscheck.open sqlcheck,conn,1,3 if not orscheck.eof then 'response.write sqlcheck '-------------- 'id_staff=request.form("id_stu")(i) sqldata="update rp_activity_register set id_staff='"&usercreate&"', date_prove='"&dcreate&"', id_status_register='1' where id_activity='"&id_activity&"' and id_stu='"&id_stu&"' " response.write sqldata set orsdata = Server.CreateObject("adodb.recordset") ' sqlcheck="select * from staffletter where id_staff='"&id_staff&"' and id_letter='"&id&"'" 'set orscheck=server.createobject("adodb.recordset") ' orscheck.open sqlcheck,conn,1,3 ' if orscheck.eof then orsdata.open sqldata,conn,1,3 ' end if '------------- End if'orscheck response.write request.form("id_stu")(i)&" checkbox value<br>" i=i+1 Loop end If 'a>0 %> <SCRIPT LANGUAGE="JavaScript"> <% response.write "alert('�ѹ�֡���������º����');" %> </SCRIPT> <form name="form2" method="post" action="preview_activity_register.asp"> <input type="hidden" name="id" value=<%=id_activity%>> </form> <script type="text/javascript"> document.form2.submit(); </script>