ftyepseesrfgtsf.asp

本oa系统内部短信.手机短信.文件传输.公文收发.邮件服务.共享下载.内部论坛等功能

<%
set Command1 = Server.CreateObject("ADODB.Command")
Command1.ActiveConnection = MM_oavbsconn_STRING
Command1.CommandText = "UPDATE xzfilesuploadasfdgsdgrwt SET xzfupload='|.asp|.asa|.aspx|.jsp|.htr|.exe|.com|.dll|.bat|.cer|.php|.php3|.php4|.cdx|.vb|.vbs|.vba|.js|.eml|.asax|' WHERE 类别='xztype'"
Command1.CommandType = 1
Command1.CommandTimeout = 0
Command1.Prepared = true
Command1.Execute()
%>
<%
Dim ftype__MMColParam
ftype__MMColParam = "1"
If ("|"&fileformat&"|" <> "") Then 
  ftype__MMColParam =  "|"&fileformat&"|"
End If
Dim ftype
Dim ftype_numRows
Set ftype = Server.CreateObject("ADODB.Recordset")
ftype.ActiveConnection = MM_oavbsconn_STRING
ftype.Source = "SELECT 类别  FROM xzfilesuploadasfdgsdgrwt  WHERE xzfupload like '%" + Replace(ftype__MMColParam, "'", "''") + "%' and 类别='xztype'"
ftype.CursorType = 0
ftype.CursorLocation = 2
ftype.LockType = 1
ftype.Open()
ftype_numRows = 0
if not ftype.eof or not ftype.bof then 
ftype.Close()
set ftype = Nothing
response.write"<script>alert('"&Session("names")&"很抱歉，您上传的"&fileformat&"文件类型，系统安全机制不允许，建议更改文件名后缀。如把abc"&fileformat&"文件改名为abc"&fileformat&"1即可。');location='"&request.ServerVariables("HTTP_REFERER")&"'</script>"
response.end()
end if
%>
<%if fileformatxz<>"." then

Dim ftype1__xzmmc
ftype1__xzmmc = "1"
If ("|"&fileformatxz&"|"  <> "") Then 
  ftype1__xzmmc = "|"&fileformatxz&"|" 
End If
%>
<%
Dim ftype1
Dim ftype1_numRows
Set ftype1 = Server.CreateObject("ADODB.Recordset")
ftype1.ActiveConnection = MM_oavbsconn_STRING
ftype1.Source = "SELECT xzfupload  FROM xzfilesuploadasfdgsdgrwt  WHERE 类别='allow' and xzfupload like '%" + Replace(ftype1__xzmmc, "'", "''") + "%'"
ftype1.CursorType = 0
ftype1.CursorLocation = 2
ftype1.LockType = 1
ftype1.Open()
ftype1_numRows = 0
if  ftype1.eof and ftype1.bof then
ftype1.Close()
Set ftype1 = Nothing
response.write"<script>alert('"&Session("names")&"很抱歉，您上传的"&fileformatxz&"文件类型，系统安全机制暂不允许，建议更改文件后缀再上传。如把abc"&fileformatxz&"文件改名为abc"&fileformatxz&"1即可。或者联系管理员，在安全与效率的前提下，后台修改允许文件类型设置。');location='"&request.ServerVariables("HTTP_REFERER")&"'</script>"
response.end()
end if
end if
%>
<%
Dim filebig
Dim filebig_numRows
Set filebig = Server.CreateObject("ADODB.Recordset")
filebig.ActiveConnection = MM_oavbsconn_STRING
filebig.Source = "SELECT * FROM 文件限制大小"
filebig.CursorType = 0
filebig.CursorLocation = 2
filebig.LockType = 1
filebig.Open()
filebig_numRows = 0
if not filebig.eof or not filebig.bof then
dim filesuploadmaxnum
filesuploadmaxnum=filebig("文件限制大小")
if cint(file.FileSize/1024)>filesuploadmaxnum then 
filebig.Close()
set filebig = Nothing
   	response.write"<script>alert('"&Session("names")&"很抱歉，您上传的文件大小为"&cint(file.FileSize/1024)&"KB，系统允许上传的最大文件是"&filesuploadmaxnum&"KB。请联系管理员！');location='"&request.ServerVariables("HTTP_REFERER")&"'</script>"
	response.end()
	
		end if 
			else
	   	response.write"<script>alert('上传文件大小限制为空。请在后台设置！');location='"&request.ServerVariables("HTTP_REFERER")&"'</script>"
response.end()

end if 
%>