📄 savefile.asp

📁 关于网络渗透技术的详细讲解
💻 ASP
字号:
<style type="text/css">
<!--
@import url("wsbs.css");
-->
</style>
</head>

<body bgcolor=#ccccff>
<!--#include file=conn.asp-->
<% 
title=request("biaoti")
zyyear=request("zyyear")
zymon=request("zymon")
'Dim AppealNum,AppealCount 
'AppealNum=2 '----------页面60秒打开网页次数的限制-----------
'AppealCount=Request.Cookies("AppealCount") 
'If AppealCount="" Then 
'response.Cookies("AppealCount")=1 
'AppealCount=1 
'response.cookies("AppealCount").expires=dateadd("s",60,now()) 
'Else 
'response.Cookies("AppealCount")=AppealCount+1 
'response.cookies("AppealCount").expires=dateadd("s",60,now()) 
'End If 
'if int(AppealCount)>int(AppealNum) then 
'response.write "为防止恶意上传文件，请您等待60秒后再上传文件.<br>为您带来不便，请谅解！" 
'response.end 
'End If 
%>
<!--#include FILE="inc.asp"-->

<%
  if session("username")="" then
  response.redirect "admin.asp"
  else
	if session("flag")>2 then
		response.write "<br><p align=center>您没有操作的权限</p>"
		response.end
	end if
  end if


   dim sql
   dim rs
   dim founderr
   founderr=false
   on error resume next
   call conn_init()

set rs=server.CreateObject("adodb.recordset")
sql="select * from wj where userid='"&session("userid")&"' and filename='"&title&"' and zyyear='"&zyyear&"' and zymon='"&zymon&"'"
rs.Open sql,conn,1,3
if not rs.eof and not rs.bof then
founderr=true
end if

if founderr=true then
	 errmsg="<li>对不起，本月该类型文件已经上传，请选择其它类型文件重新上传。"
	 response.write "<center>由于以下的原因不能保存数据：</center>"
	 response.write "<br><center><font color=red>"
	 response.write errmsg
else
'------------------------------------------------------------------------------------------------------------------
set upload=new upload_5xsoft
set file=upload.file("sf_file")
upfilename = split(file.FileName,".")
upfileext = upfilename(ubound(upfilename))
'------------在下面设置上传文件类型，增加（ and upfileext<>"文件类型" ）----------
if upfileext<>"doc" and upfileext<>"xls" and upfileext<>"txt" and upfileext<>"DOC" and upfileext<>"XLS" and upfileext<>"TXT" then
	response.write "<br><br><br><br><br>错误:上传的文件格式不对! <a href='javascript:history.go(-1)'>退回上一步</a>"
	response.end
end if
if file.fileSize<1 then
   response.write"<script language=javascript>alert('您没有选择文件：\n\n－－－－－请点击浏览按钮，从弹出的窗口中选择要上传的文件。\n\n－－－－－然后点击上传按钮就可以把文件上传了。\n\n－－－－－不过要注意上传文件的格式哦。');history.back()</script>"
   response.end 
end if
if file.fileSize<10 or file.fileSize>100*1024 then '-------修改默认的数值 100 单位(KB)-----
	response.write "<br><br><br><br><br>错误:上传的文件大小超过了限制! <a href='javascript:history.go(-1)'>退回上一步</a>"
	response.end
end if
ufp="lytax_"&day(now)&hour(now)&minute(now)&second(now)&"."&upfilename(ubound(upfilename))
file.saveas Server.mappath("upfiles/"&ufp)
set file=nothing
set upload=nothing
'------------------------------------------------------------------------------------------------------------------
rs.addnew
rs("userid")=session("userid")
rs("filename")=title
rs("filepath")=ufp
rs("lbid")=session("lbid")
rs("zyyear")=zyyear
rs("zymon")=zymon
rs("copname")=session("copname")
rs.update
rs.close
set rs=nothing
conn.close
set conn=nothing
%>
<link rel="stylesheet" href="../style.css">
<title>完成</title>
<body bgcolor="#FFFFFF" text="#000000">
<table width="95%" border="0" align="center" cellpadding="5" height="167">
  <tr align="center" valign="middle"> 
    <td height="128"> 
      <p>你已经成功上传了文件: "<%=title%>"，所属年月：<%=zyyear%>年<%=zymon%>月。<a href=upfiles/<%=ufp%>>下载</a></p>
      </td>
  </tr>
</table>
<%
end if
%>
⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -