File Manager
Back to List
| Current Directory: ~/
Editing: equipment_add1.asp
Full path: C:\ict\ICT\equipment_add1.asp
Permissions: rwx
Write test: File appears not directly writable
Current process identity: IIS APPPOOL\DefaultAppPool
<!--#INCLUDE FILE="Connectdb.asp"--> <!--#include file="inc_cache_control.asp"--> <!--#include file="inc_access_control.asp"--> <!--#include file="chk_login.asp"--> <% session("tb_name")="equipment"%> <!--#include file="chk_permission.asp"--> <% if session("tb_edit")=2 then '���Է��� �����㹰ҹ ��� ����Ңͧ�������ͧ %> <form name="form1" Action = "equipment_detail.asp" method="post"> <% id_equipment=request.form("id_equipment") id_method=request.form("id_method") id_unit=request.form("id_unit") id_type_budget=request.form("id_type_budget") year_budget=request.form("year_budget") detail_retail=request.form("detail_retail") id_type=request.form("id_type") d_purchase=request.form("d_purchase") m_purchase = request.form("m_purchase") y_purchase =request.form("y_purchase") time_assure = request.form("time_assure") price = request.form("price") id_brand = request.form("id_brand") id_owner = request.form("id_owner") serial_eq = request.form("serial_eq") number=request.form("number") mem_m=request.form("hd1") ram=request.form("ram") date_purchase=y_purchase&""&m_purchase&""&d_purchase place=request.form("place") id_status=request.form("id_status") more_detail=request.form("more_detail") d_retire=request.form("d_retire") m_retire=request.form("m_retire") y_retire=request.form("y_retire") date_retire=d_retire&"/"&m_retire&"/"&y_retire core_cpu=request.form("core_cpu") mem_m="aaa" id_equipment="7450" %> <% sql_data="select * from equipment where id_equipment='"&id_equipment&"' " set ors_data=server.createobject("adodb.recordset") ors_data.open sql_data,conn,1,3 if not ors_data.eof then%> <SCRIPT LANGUAGE="JavaScript"> <% 'response.write "���ʫ��"&id_lecturer response.write"alert('"&id_lecturer&"�ѹ�֡�����Ţ����ѳ����');" 'response.write "window.location.href='equipmentindex.asp';" %> --> </SCRIPT> <% else 'sqldata="insert into equipment(id_equipment,id_type,date_purchase,time_assure,price,id_brand,id_owner,serial_eq,number,ram,place,id_status,more_detail,d_purchase,m_purchase,y_purchase,core_cpu,id_unit,id_method,id_type_budget,year_budget,hd1,detail_retail) values('"&id_equipment&"','"&id_type&"','"&date_purchase&"','"&time_assure&"', '"&price&"','"&id_brand&"','"&id_owner&"','"&serial_eq&"','"&number&"','"&ram&"','"&place&"','"&id_status&"','"&more_detail&"','"&d_purchase&"','"&m_purchase&"','"&y_purchase&"','"&core_cpu&"','"&id_unit&"','"&id_method&"','"&id_type_budget&"','"&year_budget&"','"&hd1&"','"&detail_retail&"')" sqldata="insert into equipment(id_equipment,mem_m) values('"&id_equipment&"','"&mem_m&"')" set orsdata = Server.CreateObject("adodb.recordset") 'orsdata.open sqldata,conn,1,3 response.write sqldata 'response.write "<meta http-equiv='refresh' content ='0;url=equipment_detail.asp?id_quipment="&id_equipment&"'>" end if 'end if set conn = nothing ' response.write "<meta http-equiv='refresh' content ='0;url=equipment_detail.asp?id_equipment="&id_equipment&"'>" %> </FORM> <% else '���Է� response.write "<tr><td colspan=3><center>�س������Է����� �س���ѵԹ��" response.write "<meta http-equiv=refresh content =4;url=javascript:history.back();>" '���Է� end if '���Է� %>