📄 upload.asp
字号:
<%response.buffer=true%>
<!--#INCLUDE FILE="../../../system/odbc_connection.asp"-->
<!--#INCLUDE FILE="../../../system/function.asp"-->
<%
if session("user_type")<>"T" then
response.redirect "../../../index.asp"
end if
%>
<html>
<head>
<title>上传文件</title>
</head>
<body>
<%
'这一段将图片上传到upload文件夹下------------------------------------------------------------
'建立lyfupload上传组件实例
Dim Upload
Set upload = Server.CreateObject("LyfUpload.UploadFile")
'设置最大文件大小为2M
upload.MaxSize=2*1024*1024
'设置上传文件保存路径为当前文件夹下的upload文件夹。
Dim filepath
filepath=Server.MapPath("../../../../uploadfile/" & Session("lesson_id"))
Response.Write filepath
'保存文件到服务器,upfile是表单中的名称，filepath是保存路径，false表示不允许覆盖
Dim filename
filename=upload.SaveFile("upfile",filepath,false)
if filename="3" then
Response.Write "<center>此文件已经存在！请返回"
Response.write "<a href='javascript:history.back(-1);'>重新上传</a><center>"
Elseif filename="0" then
Response.Write "<center>文件体积太大！请返回"
Response.write "<a href='javascript:history.back(-1);'>重新上传</a><center>"
Else
'正确上传后,首先判断扩展名，如果是asp或exe等文件，立即删除
'如果是exe或ASP文件，立即删除
if GetExt(filename)=".exe" or GetExt(filename)=".asp" or GetExt(filename)=".aspx" then
Dim fso
set fso=server.createobject("scripting.filesystemobject")
fso.deletefile filepath & "\" & filename
Response.Write "文件类型错误"
Response.End
end if
'首先将其保存到数据库中
Dim sql
sql="insert into upload_file(upload_file_name,user_id,ext,size,submit_date) values('" & filename & "','" & session("user_id") & "','" & GetExt(filename) & "'," & upload.FileSize & ",#" & Now() & "#)"
Response.Write sql
db.execute(sql)
'从中取出刚才的记录编号
Dim rs
sql="select Top 1 id,ext from upload_file where user_id='" & session("user_id") & "' order by submit_date desc"
set rs=db.execute(sql)
'变化文件的名字
Dim pathold,pathnew
set fso=server.createobject("scripting.filesystemobject")
pathold=filepath & "\" & filename
filename=rs("id") & rs("ext")
pathnew=filepath & "\" & filename
fso.copyfile pathold, pathnew
fso.deletefile pathold
set fso=nothing
'将有关数据存入数据库
sql = "update teacher set upload_file_name ='" & filename & "' where user_id='" & session("user_id") & "'"
db.Execute(Sql)
response.redirect "index.asp"
End If
%>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -