savedoc.asp

添加我下载到的东西

<%@Language="VBScript"%>
<SCRIPT language="VBScript" runat="Server">
Dim strReturnString,sFileName
'为了增强安全性，开发者可增加验证当前用户的功能，例如通过Session等
'防止用户自己写客户端脚本向savedoc.asp提交非法文件
Function SaveFile(sFilePath,sContent)
	On Error Resume Next
	Dim oStream
	Set oStream = Server.CreateObject("ADODB.Stream")

	oStream.Type = 1
	oStream.Open
	oStream.Write sContent
	oStream.SaveToFile sFilePath, 2
	
	oStream.Close
	Set oStream = Nothing
	SaveFile = True
	If Err.number <> 0 Then
		SaveFile = False
	End If
End Function

Sub readAndSaveFile()
	On Error Resume Next
	Dim i
	Dim sFileContent
	Dim oXML
	Set oXML = Server.CreateObject("Msxml2.DOMDocument")
	oXML.async = false
	oXML.load Request
	sFileContent = oXml.documentElement.childNodes.item(0).nodeTypedValue
	sFileName    = oXml.documentElement.childNodes.item(0).Attributes.getNamedItem("filename").Text
	'得到文件扩展名
	Dim intP, strFileExName
	intP = InStrRev(sFileName, ".")
	strFileExName = Mid(sFileName, intP)
	'接受doc、ppt和xls类型文件。开发者可增加接受其他类型文件
	if strFileExName = ".doc" or strFileExName = ".xls" or strFileExName = ".ppt"  or strFileExName = ".wps" then
		SaveFile  server.mappath(".") & "\" & sFileName, sFileContent
	end if

	Set oXml = Nothing
	If Err.number <> 0 Then
		strReturnString = "-1"
	End If
End Sub
Sub UpdateTime()
	Dim conn,dbpath
	Set conn=Server.CreateObject("ADODB.Connection")
	dbpath=Server.MapPath("../demodata/soademo.mdb")
	conn.Open "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=" &dbpath
	dim strsql
	'********************************************************************
	' 读数据库相关操作
	strsql="update word set submitTime='" & now() & "' where fileName='" & sFileName &"'"
	conn.execute(strsql)
	conn.Close
	' 释放数据库连接对象
	set conn=nothing
end sub
'执行文件
readAndSaveFile
If strReturnString = "-1" Then
    Response.write("Save Error!")
Else
	UpdateTime
    Response.write("OK")
End If

</SCRIPT>