aa_upload.asp

台讯企业全站管理系统V2006 供下载时经过了严格的测试

 <%@ LANGUAGE = VBScript CodePage = 936%>
<%
'***********************************************************************************
' 产品名称：台讯企业全站管理系统（V2006简体中文版）
' 程序开发：HECHENn（QQ：34103037　Emial：[e-mail]）
' Copyright 2006 txcodes.com - All Rights Reserved. 
'***********************************************************************************

PageName="Admin,0"
%>
<!--#include file="Inc/Const.asp"-->
<!--#include file="Inc/System.asp"-->

<%
Call Page_AdminFlag(6)
Page_HeadName="<A HREF=Aa_upload.asp?Action=Pic>图片文件</A>　|　<A HREF=Aa_upload.asp?Action=Flash>动画文件</A>　|　<A HREF=Aa_upload.asp?Action=Media>媒体文件</A>　|　<A HREF=Aa_upload.asp?Action=Real>Real文件</A>　|　<A HREF=Aa_upload.asp?Action=Other>其它文件</A>　|　<A HREF=Aa_upload.asp?Action=Face>发帖表情</A>　|　<A HREF=Aa_upload.asp?Action=Picture>用户头像</A>　|　<A HREF=Aa_upload.asp?Action=Group>等级图像</A>"
Call Page_formBody()
Call Page_Spane(5)
Dim AllUploadFiles,xx,yy
FileTypex=request.querystring("FileTypex")
FileTypexc=request.querystring("FileTypexc")
DelFile=request.querystring("DelFile")
strFileType=request.querystring("strFileType")
IF Action="Manage" THEN
Page_BootmName="上传文件管理"
Page_BootName="您现在的位置：<A HREF=A_Right.asp>管理首页</A> >> " & Page_BootmName
strIfa = "<TABLE WIDTH=100%  BORDER=0 CELLPADDING=0 CELLSPACING=1>"&_
         "<Form NAME=Save method=post action=Aa_upload.asp?FileTypexc=RedirectTo&FileTypex=not&DelFile=Delall>"&_
         "<TR>"&_
         "<TD HEIGHT=180 CLASS=Table8>请选择文件夹：<BR><BR><INPUT CLASS=radio_all TYPE=radio NAME=uploadx VALUE='Pic'> 图片文件　　<INPUT CLASS=radio_all TYPE=radio NAME=uploadx VALUE='Flash'> 动画文件　　<INPUT CLASS=radio_all TYPE=radio NAME=uploadx VALUE='Media'> 媒体文件　　<INPUT CLASS=radio_all TYPE=radio NAME=uploadx VALUE='Real'> Real文件　　<INPUT CLASS=radio_all TYPE=radio NAME=uploadx VALUE='Other'> 其它文件　　"&_
		 "<INPUT CLASS=radio_all TYPE=radio NAME=uploadx VALUE='Face'> 发帖表情　　<INPUT CLASS=radio_all TYPE=radio NAME=uploadx VALUE='Picture'> 用户头像　　<INPUT CLASS=radio_all TYPE=radio NAME=uploadx VALUE='Group'> 等级图像<BR><BR>"&_
		 "<INPUT TYPE=submit CLASS=submit_all NAME=FlagOk VALUE=查看全部文件 onClick=" & CHR(34) & "this.form.action='Aa_upload.asp?FileTypexc=RedirectTo';this.form.submit()" & CHR(34) & "> "&_
		 "<INPUT TYPE=submit CLASS=submit_all NAME=FlagOk VALUE=已使用文件 onClick=" & CHR(34) & "this.form.action='Aa_upload.asp?FileTypexc=RedirectTo&FileTypex=yes';this.form.submit()" & CHR(34) & "> "&_
		 "<INPUT TYPE=submit CLASS=submit_all NAME=FlagOk VALUE=无用文件 onClick=" & CHR(34) & "this.form.action='Aa_upload.asp?FileTypexc=RedirectTo&FileTypex=not';this.form.submit()" & CHR(34) & "> "&_
		 "<INPUT TYPE=submit CLASS=submit_all NAME=FlagOk VALUE=清空无用文件  onClick='{if(confirm(" & CHR(34) & "此操作不但会加重服务器负担，而且被删除的文件无法再恢复，您确定执行操作？" & CHR(34) & ")){return true;}return false;}'><BR><BR>"&_
		 "此功能需服务器支持FSO功能，操作时会加重服务器的负担，请谨慎使用"&_
		 "</TR></Form>"&_
         "</TABLE>"
         Call Page_aTable(0,0)
Else
         IF Request.form("uploadx")<>"" THEN Action=Request.form("uploadx")
         IF FileTypexc="RedirectTo" THEN
             Response.Redirect "Aa_upload.asp?FileTypex=" & FileTypex & "&Action=" & Action & "&DelFile=" & DelFile
         End IF
         IF Action="" THEN
             Errorst="请选择一个文件夹！"
             founderr=True
         End IF
             IF founderr=True THEN
	             Call Form_Error()
             Else
         IF FileTypex="yes" OR FileTypex="not" THEN
		 Set Rs=server.createobject("adodb.recordset")
       		 Sql="Select UploadFiles From Tx_About"
       		 Rs.open Sql,Conn,1,1
		 		   While Not Rs.Eof
		   		     AllUploadFiles=AllUploadFiles & Rs("UploadFiles")
		 		   Rs.MoveNext
		   		 Wend
			Rs.Close
		 Set Rs=Nothing
	Set Rs=server.createobject("adodb.recordset")
        Sql="Select Face_Url From Tx_Face"
        Rs.open Sql,Conn,1,1
		    While Not Rs.Eof
		        AllUploadFiles=AllUploadFiles & Rs("Face_Url")
		    Rs.MoveNext
		    Wend
		Rs.Close
		Set Rs=Nothing
	Set Rs=server.createobject("adodb.recordset")
        Sql="Select Groud_Pic From Tx_Groud"
        Rs.open Sql,Conn,1,1
		    While Not Rs.Eof
		        AllUploadFiles=AllUploadFiles & Rs("Groud_Pic")
		    Rs.MoveNext
		    Wend
		Rs.Close
		Set Rs=Nothing
	Set Rs=server.createobject("adodb.recordset")
        Sql="Select Honor_Pic From Tx_Honor"
        Rs.open Sql,Conn,1,1
		    While Not Rs.Eof
		        AllUploadFiles=AllUploadFiles & Rs("Honor_Pic")
		    Rs.MoveNext
		    Wend
		Rs.Close
		Set Rs=Nothing
	Set Rs=server.createobject("adodb.recordset")
        Sql="Select UploadFiles From Tx_Inform"
        Rs.open Sql,Conn,1,1
		    While Not Rs.Eof
		        AllUploadFiles=AllUploadFiles & Rs("UploadFiles")
		    Rs.MoveNext
		    Wend
		Rs.Close
		Set Rs=Nothing
	Set Rs=server.createobject("adodb.recordset")
        Sql="Select UploadFiles From Tx_News"
        Rs.open Sql,Conn,1,1
		    While Not Rs.Eof
		        AllUploadFiles=AllUploadFiles & Rs("UploadFiles")
		    Rs.MoveNext
		    Wend
		Rs.Close
		Set Rs=Nothing
	Set Rs=server.createobject("adodb.recordset")
        Sql="Select Picture_Url From Tx_Picture"
        Rs.open Sql,Conn,1,1
		    While Not Rs.Eof
		        AllUploadFiles=AllUploadFiles & Rs("Picture_Url")
		    Rs.MoveNext
		    Wend
		Rs.Close
		Set Rs=Nothing
	Set Rs=server.createobject("adodb.recordset")
        Sql="Select Products_Pic,UploadFiles From Tx_Products"
        Rs.open Sql,Conn,1,1
		    While Not Rs.Eof
		        AllUploadFiles=AllUploadFiles & Rs("Products_Pic") & Rs("UploadFiles")
		    Rs.MoveNext
		    Wend
		Rs.Close
		Set Rs=Nothing
	Set Rs=server.createobject("adodb.recordset")
        Sql="Select UploadFiles From Tx_Sells"
        Rs.open Sql,Conn,1,1
		    While Not Rs.Eof
		        AllUploadFiles=AllUploadFiles & Rs("UploadFiles")
		    Rs.MoveNext
		    Wend
		Rs.Close
		Set Rs=Nothing
	Set Rs=server.createobject("adodb.recordset")
        Sql="Select UploadFiles From Tx_Work"
        Rs.open Sql,Conn,1,1
		    While Not Rs.Eof
		        AllUploadFiles=AllUploadFiles & Rs("UploadFiles")
		    Rs.MoveNext
		    Wend
		Rs.Close
		Set Rs=Nothing
End IF
Select Case Action
Case "Pic"
Page_BootmName="图片文件管理"
UploadDir="Upload/Pic/"
Case "Flash"
Page_BootmName="动画文件管理"
UploadDir="Upload/Flash/"
Case "Media"
Page_BootmName="影音文件管理"
UploadDir="Upload/Media/"
Case "Real"
Page_BootmName="Real文件管理"
UploadDir="Upload/Real/"
Case "Other"
Page_BootmName="其它文件管理"
UploadDir="Upload/"
Case "Face"
Page_BootmName="发帖表情管理"
UploadDir="Images/Face/"
Case "Picture"
Page_BootmName="用户头像管理"
UploadDir="Images/Picture/"
Case "Group"
Page_BootmName="等级图像管理"
UploadDir="Images/Group/"
End Select
IF FileTypex="yes" THEN Page_BootmName=Page_BootmName & " > 已使用的文件"
IF FileTypex="not" THEN Page_BootmName=Page_BootmName & " > 无用的文件"
Page_BootName="您现在的位置：<A HREF=A_Right.asp>管理首页</A> >> " & Page_BootmName
set fso=CreateObject("Scripting.FileSystemObject")
IF request("page")<>"" THEN
    currentPage=cint(request("page"))
Else
	currentPage=1
End IF
TruePath=Server.MapPath(UploadDir)
Select Case DelFile
Case "Del"
	dim whichfile,arrFileName
	whichfile=Request("xFileName")
IF whichfile="" THEN
Errorst="请选择要删除的文件！"
founderr=true
End IF
    IF founderr=true THEN
	    Call Form_Error()
    Else	
	IF instr(whichfile,",")>0 THEN
		arrFileName=split(whichfile,",")
		for i=0 to ubound(arrFileName)
			IF left(trim(arrFileName(i)),3)<>"../" and left(trim(arrFileName(i)),1)<>"/" THEN