getclientxml.asp

Windows Web脚本开发指南/(美) Dan Heflin, Todd Ney著 的源码

<%@ LANGUAGE=JavaScript %>
<%
  var xmlDocObject = Server.CreateObject("Microsoft.XMLDOM");
  var common = Server.CreateObject("CommonFunctionality.WSC");  
  var conn = common.getDatabaseObject();
  var fileName = Request.QueryString("file");
  var createdBy = common.replaceQuotes(Request.QueryString("createdBy"));
   
  xmlDocObject.async=false;
  xmlDocObject.load(Request);
  
  var startDate = xmlDocObject.documentElement.getAttribute("startDate");
  
  //check to see if the timesheet exists
  var sql = "select FileID from TimesheetList where FileName = '" + fileName + "' and CreatedBy = '" + createdBy + "'";
  var rs = conn.Execute(sql);
  if (rs.EOF){
    //if the timesheet does not exist insert it into the timesheetlist table and 
    //retrieve the id for the record
    
    sql = "insert into TimesheetList (FileName, CreatedBy, StartDate) values ('";
    sql += fileName + "', '" + createdBy + "', '" + startDate + "')";
    conn.Execute(sql);
    sql = "select FileID from TimesheetList where FileName = '" + fileName + "' and CreatedBy = '" + createdBy + "'";
    rs = conn.Execute(sql);
    if (rs.EOF)
        Response.Write("Unsuccessful"); 
    else
      fileID = rs(0);
  }
  else{
    //if the timesheet exists then delete the details for the sheet
    fileID = rs(0);
    sql = "delete from TimesheetDetail where FileID = " + fileID 
    conn.Execute(sql);
  } 
  var tasks = xmlDocObject.selectNodes("//task");
  var task = tasks.nextNode();
  var day, clientID, startTime, endTime, description;
  
  while (task != null){
    sql = "insert into TimesheetDetail (FileID, Day, ClientID, StartTime, EndTime, Description) values (";
    day = task.getAttribute("day");
    clientID = common.replaceQuotes(task.getAttribute("clientID"));
    startTime = task.getAttribute("startTime");
    endTime = task.getAttribute("endTime");
    description = common.replaceQuotes(task.text);   
    sql += fileID + ", '" + day + "', '" + clientID + "', '" + startTime + "', '" + endTime + "', '" + description + "')";
    conn.Execute(sql);
    task = tasks.nextNode();
  }
  Response.Write("accepted");
%>