File Manager

<%
		  pern=session("username")
		  per="2"
		  tb="letterin"
		  sqlnc="select * from tb_permission where id_staff='"&pern&"' and tb_edit='"&per&"' and tb_name='"&tb&"'"
		  set orsnc=server.createobject("adodb.recordset")
		  orsnc.open sqlnc,conn,1,3
if not orsnc.eof then
		  %>

<head>
		<body>
		<%

dim ors
		dim fs
		Set fs=Server.CreateObject("Scripting.FileSystemObject")
		id_letter=request("id")
		t2=request("t2")
		
			If t2="1" Then
				sql2="select id_letter, filename,  from letterin where id_letter='"&id_letter&"'"
				Set ors2=server.createobject("adodb.recordset")
				ors2.open sql2,conn,1,3
				If Not ors2.eof Then
						chf=ors2("filename")
						if fs.FileExists(server.mappath("letinup/"&chf&"")) then
						fs.DeleteFile(server.mappath("letinup/"&chf&""))
						end If
				End if
			Else
				sql2="select id_letter, filename2 from letterin where id_letter='"&id_letter&"'"
				Set ors2=server.createobject("adodb.recordset")
				ors2.open sql2,conn,1,3
				If Not ors2.eof Then
					chf=ors2("filename2")
					if fs.FileExists(server.mappath("letinup/"&chf&"")) then
					fs.DeleteFile(server.mappath("letinup/"&chf&""))
					Else
					Response.write "aaaNofile"
					End if
				End if
			End if

set fs=nothing
		
		set ors=server.createobject("adodb.recordset")
			If t2="1" then
				 sqlmark="update letterin set filename='' where id_letter= '"&id_letter&"'"
				 
			Else
				sqlmark="update letterin set filename2='' where id_letter= '"&id_letter&"'"
				
			End if
			ors.Open sqlmark, conn, 1, 3
			
			%>
			
		<SCRIPT LANGUAGE="JavaScript">
		<%
				response.write"alert('ź���������º���¤��');"

%>
				-->
				</SCRIPT>
				<%
				response.write "<meta http-equiv='refresh' content ='0;url=detail_letterin.asp?id="&id_letter&"'>"

Conn.Close

'end if
		%>
		</FORM>
		</body>
		</head>
		<%
else
%>
<SCRIPT LANGUAGE="JavaScript">
<%

response.write "window.location.href='indexletterin.asp';"
		%>
		-->
		</SCRIPT>
		<%
end if

File Manager

Editing: del_filelet.asp.bak