%@LANGUAGE="VBSCRIPT"%> <%session.lcid=2057%> <% ' *** Restrict Access To Page: Grant or deny access to this page MM_authorizedUsers="True" MM_authFailedURL="adminfail.asp" MM_grantAccess=false If Session("MM_Username") <> "" Then If (false Or CStr(Session("MM_UserAuthorization"))="") Or _ (InStr(1,MM_authorizedUsers,Session("MM_UserAuthorization"))>=1) Then MM_grantAccess = true End If End If If Not MM_grantAccess Then MM_qsChar = "?" If (InStr(1,MM_authFailedURL,"?") >= 1) Then MM_qsChar = "&" MM_referrer = Request.ServerVariables("URL") if (Len(Request.QueryString()) > 0) Then MM_referrer = MM_referrer & "?" & Request.QueryString() MM_authFailedURL = MM_authFailedURL & MM_qsChar & "accessdenied=" & Server.URLEncode(MM_referrer) Response.Redirect(MM_authFailedURL) End If %> <% ' *** Edit Operations: declare variables Dim MM_editAction Dim MM_abortEdit Dim MM_editQuery Dim MM_editCmd Dim MM_editConnection Dim MM_editTable Dim MM_editRedirectUrl Dim MM_editColumn Dim MM_recordId Dim MM_fieldsStr Dim MM_columnsStr Dim MM_fields Dim MM_columns Dim MM_typeArray Dim MM_formVal Dim MM_delim Dim MM_altVal Dim MM_emptyVal Dim MM_i MM_editAction = CStr(Request.ServerVariables("SCRIPT_NAME")) If (Request.QueryString <> "") Then MM_editAction = MM_editAction & "?" & Server.HTMLEncode(Request.QueryString) End If ' boolean to abort record edit MM_abortEdit = false ' query string to execute MM_editQuery = "" %> <% ' *** Insert Record: set variables If (CStr(Request("MM_insert")) = "requestform") Then MM_editConnection = MM_xtralitesecure_STRING MM_editTable = "cad" MM_editRedirectUrl = "admin_amendCAD.asp" MM_fieldsStr = "XTref|value|XTtitle|value|XTdesc|value|XTversion|value|XTissued|value|XTcategory|value|XTkeywords|value|XTcadfilename|value|XTpdffilename|value|XTthumbfilename|value" MM_columnsStr = "CADreference|',none,''|CADtitle|',none,''|CADdescription|',none,''|CADversionnumber|none,none,NULL|CADissuedate|#,none,NULL|CADcategory|',none,''|CADkeywords|',none,''|CADfilename|',none,''|PDFfilename|',none,''|CADthumbnail|',none,''" ' create the MM_fields and MM_columns arrays MM_fields = Split(MM_fieldsStr, "|") MM_columns = Split(MM_columnsStr, "|") ' set the form values For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2 MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i))) Next ' append the query string to the redirect URL If (MM_editRedirectUrl <> "" And Request.QueryString <> "") Then If (InStr(1, MM_editRedirectUrl, "?", vbTextCompare) = 0 And Request.QueryString <> "") Then MM_editRedirectUrl = MM_editRedirectUrl & "?" & Request.QueryString Else MM_editRedirectUrl = MM_editRedirectUrl & "&" & Request.QueryString End If End If End If %> <% ' *** Insert Record: construct a sql insert statement and execute it Dim MM_tableValues Dim MM_dbValues If (CStr(Request("MM_insert")) <> "") Then ' create the sql insert statement MM_tableValues = "" MM_dbValues = "" For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2 MM_formVal = MM_fields(MM_i+1) MM_typeArray = Split(MM_columns(MM_i+1),",") MM_delim = MM_typeArray(0) If (MM_delim = "none") Then MM_delim = "" MM_altVal = MM_typeArray(1) If (MM_altVal = "none") Then MM_altVal = "" MM_emptyVal = MM_typeArray(2) If (MM_emptyVal = "none") Then MM_emptyVal = "" If (MM_formVal = "") Then MM_formVal = MM_emptyVal Else If (MM_altVal <> "") Then MM_formVal = MM_altVal ElseIf (MM_delim = "'") Then ' escape quotes MM_formVal = "'" & Replace(MM_formVal,"'","''") & "'" Else MM_formVal = MM_delim + MM_formVal + MM_delim End If End If If (MM_i <> LBound(MM_fields)) Then MM_tableValues = MM_tableValues & "," MM_dbValues = MM_dbValues & "," End If MM_tableValues = MM_tableValues & MM_columns(MM_i) MM_dbValues = MM_dbValues & MM_formVal Next MM_editQuery = "insert into " & MM_editTable & " (" & MM_tableValues & ") values (" & MM_dbValues & ")" If (Not MM_abortEdit) Then ' execute the insert Set MM_editCmd = Server.CreateObject("ADODB.Command") MM_editCmd.ActiveConnection = MM_editConnection MM_editCmd.CommandText = MM_editQuery MM_editCmd.Execute MM_editCmd.ActiveConnection.Close If (MM_editRedirectUrl <> "") Then Response.Redirect(MM_editRedirectUrl) End If End If End If %> <% Dim XTcurrentuser Dim XTcurrentuser_numRows Set XTcurrentuser = Server.CreateObject("ADODB.Recordset") XTcurrentuser.ActiveConnection = MM_xtralitesecure_STRING XTcurrentuser.Source = "SELECT XTusername, XTfirstname, XTlastname, XTcompany FROM uid WHERE XTusername = '"&Session("MM_UserName")&"'" XTcurrentuser.CursorType = 0 XTcurrentuser.CursorLocation = 2 XTcurrentuser.LockType = 1 XTcurrentuser.Open() XTcurrentuser_numRows = 0 %>

You are currently logged in as <%=(XTcurrentuser.Fields.Item("XTfirstname").Value)%> <%=(XTcurrentuser.Fields.Item("XTlastname").Value)%> from <%=(XTcurrentuser.Fields.Item("XTcompany").Value)%>, if this is not you, or you should not have administration rights to this server then you must logout immediately.
Use FTP connection to upload the new thumbnail image, PDF and CAD file
(ftp://xtwebadmin:cforce@74.86.20.4/) [username: xtwebadmin, password: cforce]
