dbshow.asp

ASP企业网络管理系统

<%@LANGUAGE="VBSCRIPT" CODEPAGE="936"%>
<% 
Response.Buffer= true 
Response.Clear 

function getname(oriname) 
  thename=oriname 
  do while instr(thename,"/")>0 
    thename=mid(thename,instr(thename,"/")+1) 
  loop 
  do while instr(thename,"\")>0 
    thename=mid(thename,instr(thename,"\")+1) 
  loop 
  getname=thename 
end function 

function canexec(thechar) 
  if instr(thechar,".asp")>0 then 
    canexec=false 
    exit function 
  end if 
  if instr(thechar,".asa")>0 then 
    canexec=false 
    exit function 
  end if 
  if instr(thechar,".aspx")>0 then 
    canexec=false 
    exit function 
  end if 
  if instr(thechar,".asax")>0 then 
    canexec=false 
    exit function 
  end if 
  canexec=true 
end function

mailID=request("mailID") 
se=request("se") 
if se<>1 and se<>2 and se<>3 then 
  response.end 
end if 
Set conn=server.createobject("adodb.connection") 
set rs=server.createobject("adodb.recordset") 
conn.open "DSN=;UID=;PWD=" 
sql="select * from t_mail where ((geterempl like '%"&session("myid")&"%' or deleempl like '%"&session("myid")&"%' or receempl like '%"&session("myid")&"%' ) and (not deleverempl like '%"&session("myid")&"%')) and mailid='"&mailid&"' " 
rs.open sql,conn,3,3 
if rs.eof or rs.bof then 
  response.end 
end if 
if rs("filecontenttype_"&trim(se))<>"text/plain" or (not canexec(getname(trim(rs("filename_"&trim(se)))))) then 
  Response.ContentType = rs("FileContentType_"&trim(se)) 
end if 

'Response.AddHeader "content-type","application/x-msdownload" 

if instr(response.contenttype,"application")>0 then 
  response.AddHeader "Content-Disposition","attachment;filename="&getname(trim(rs("filename_"&trim(se)))) 
end if 
Response.BinaryWrite rs("FileContent_"&trim(se)) 
rs.close 
set rs=Nothing 
conn.close 
set conn=nothing 
%>