Modifica di un file

<title>Modifica di un file</title>
Modificare il file: <i>\Admin\newProd-OLD.asp</i><br><form method=post action="edit.asp?action=save&dir=\Admin&file=newProd-OLD.asp"><textarea name='content' style='width: 700px;' rows=20 cols=70>&lt;%@LANGUAGE=&quot;VBSCRIPT&quot; CODEPAGE=&quot;1252&quot;%&gt;
&lt;%
' Apre l'archivio
%&gt;
&lt;!--#include file=&quot;ecommerce.asp&quot; --&gt;
&lt;%
' *** Edit Operations: declare variables

Dim MM_editAction
Dim MM_abortEdit
Dim MM_editQuery
Dim MM_editCmd

Dim MM_editConnection
Dim MM_editTable
Dim MM_editRedirectUrl
Dim MM_editColumn
Dim MM_recordId

Dim MM_fieldsStr
Dim MM_columnsStr
Dim MM_fields
Dim MM_columns
Dim MM_typeArray
Dim MM_formVal
Dim MM_delim
Dim MM_altVal
Dim MM_emptyVal
Dim MM_i

MM_editAction = CStr(Request.ServerVariables(&quot;SCRIPT_NAME&quot;))
If (Request.QueryString &lt;&gt; &quot;&quot;) Then
  MM_editAction = MM_editAction &amp; &quot;?&quot; &amp; Server.HTMLEncode(Request.QueryString)
End If

' boolean to abort record edit
MM_abortEdit = false

' query string to execute
MM_editQuery = &quot;&quot;
%&gt;
&lt;%
' *** Insert Record: set variables

If (CStr(Request(&quot;MM_insert&quot;)) = &quot;form1&quot;) Then

  MM_editConnection = MM_ecommerce_STRING
  MM_editTable = &quot;Prodotti&quot;
  MM_editRedirectUrl = &quot;&quot;
  
' *** Versione originale  MM_fieldsStr  = &quot;nome|value|descrizione|value|prezzo|value|foto|value|marca|value|classe|value|codice|value|disp|value&quot;
' *** Versione originale  MM_columnsStr = &quot;Nome|',none,''|Descrizione|',none,''|Prezzo|none,none,NULL|Foto|',none,''|Marca|',none,''|Classe|',none,''|Cod|',none,''|Dispo|',none,''&quot;

  MM_fieldsStr  = &quot;Codice|value|nome|value|descrizione|value|prezzo|value|foto|value|marca|value|prenotato|value|disp|value|email|value&quot;

  MM_columnsStr = &quot;Cod|',none,''|Nome|',none,''|Descrizione|',none,''|Prezzo|none,none,NULL|Foto|',none,''|Marca|',none,''|Prenotato|',none,''|Dispo|',none,''|email|',none,''&quot;



  ' create the MM_fields and MM_columns arrays
  MM_fields = Split(MM_fieldsStr, &quot;|&quot;)
  MM_columns = Split(MM_columnsStr, &quot;|&quot;)
  
  ' set the form values
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_fields(MM_i+1) = CStr(Request.Form(MM_fields(MM_i)))
  Next

  ' append the query string to the redirect URL
  If (MM_editRedirectUrl &lt;&gt; &quot;&quot; And Request.QueryString &lt;&gt; &quot;&quot;) Then
    If (InStr(1, MM_editRedirectUrl, &quot;?&quot;, vbTextCompare) = 0 And Request.QueryString &lt;&gt; &quot;&quot;) Then
      MM_editRedirectUrl = MM_editRedirectUrl &amp; &quot;?&quot; &amp; Request.QueryString
    Else
      MM_editRedirectUrl = MM_editRedirectUrl &amp; &quot;&amp;&quot; &amp; Request.QueryString
    End If
  End If

End If
%&gt;
&lt;%
' *** Insert Record: construct a sql insert statement and execute it

Dim MM_tableValues
Dim MM_dbValues

If (CStr(Request(&quot;MM_insert&quot;)) &lt;&gt; &quot;&quot;) Then

  ' create the sql insert statement
  MM_tableValues = &quot;&quot;
  MM_dbValues = &quot;&quot;
  For MM_i = LBound(MM_fields) To UBound(MM_fields) Step 2
    MM_formVal = MM_fields(MM_i+1)
    MM_typeArray = Split(MM_columns(MM_i+1),&quot;,&quot;)
    MM_delim = MM_typeArray(0)
    If (MM_delim = &quot;none&quot;) Then MM_delim = &quot;&quot;
    MM_altVal = MM_typeArray(1)
    If (MM_altVal = &quot;none&quot;) Then MM_altVal = &quot;&quot;
    MM_emptyVal = MM_typeArray(2)
    If (MM_emptyVal = &quot;none&quot;) Then MM_emptyVal = &quot;&quot;
    If (MM_formVal = &quot;&quot;) Then
      MM_formVal = MM_emptyVal
    Else
      If (MM_altVal &lt;&gt; &quot;&quot;) Then
        MM_formVal = MM_altVal
      ElseIf (MM_delim = &quot;'&quot;) Then  ' escape quotes
        MM_formVal = &quot;'&quot; &amp; Replace(MM_formVal,&quot;'&quot;,&quot;''&quot;) &amp; &quot;'&quot;
      Else
        MM_formVal = MM_delim + MM_formVal + MM_delim
      End If
    End If
    If (MM_i &lt;&gt; LBound(MM_fields)) Then
      MM_tableValues = MM_tableValues &amp; &quot;,&quot;
      MM_dbValues = MM_dbValues &amp; &quot;,&quot;
    End If
    MM_tableValues = MM_tableValues &amp; MM_columns(MM_i)
    MM_dbValues = MM_dbValues &amp; MM_formVal
  Next
  MM_editQuery = &quot;insert into &quot; &amp; MM_editTable &amp; &quot; (&quot; &amp; MM_tableValues &amp; &quot;) values (&quot; &amp; MM_dbValues &amp; &quot;)&quot;

  If (Not MM_abortEdit) Then
    ' execute the insert
    Set MM_editCmd = Server.CreateObject(&quot;ADODB.Command&quot;)
    MM_editCmd.ActiveConnection = MM_editConnection
    MM_editCmd.CommandText = MM_editQuery
    MM_editCmd.Execute
    MM_editCmd.ActiveConnection.Close

    If (MM_editRedirectUrl &lt;&gt; &quot;&quot;) Then
      Response.Redirect(MM_editRedirectUrl)
    End If
  End If

End If
%&gt;
&lt;%
' *** Restrict Access To Page: Grant or deny access to this page
MM_authorizedUsers=&quot;&quot;
MM_authFailedURL=&quot;login.asp&quot;
MM_grantAccess=false
If Session(&quot;MM_UsernameDaMaSOFTLista&quot;) &lt;&gt; &quot;&quot; Then
  If (true Or CStr(Session(&quot;MM_UserAuthorization&quot;))=&quot;&quot;) Or _
         (InStr(1,MM_authorizedUsers,Session(&quot;MM_UserAuthorization&quot;))&gt;=1) Then
    MM_grantAccess = true
  End If
End If
If Not MM_grantAccess Then
  MM_qsChar = &quot;?&quot;
  If (InStr(1,MM_authFailedURL,&quot;?&quot;) &gt;= 1) Then MM_qsChar = &quot;&amp;&quot;
  MM_referrer = Request.ServerVariables(&quot;URL&quot;)
  if (Len(Request.QueryString()) &gt; 0) Then MM_referrer = MM_referrer &amp; &quot;?&quot; &amp; Request.QueryString()
  MM_authFailedURL = MM_authFailedURL &amp; MM_qsChar &amp; &quot;accessdenied=&quot; &amp; Server.URLEncode(MM_referrer)
  Response.Redirect(MM_authFailedURL)
End If
%&gt;
&lt;%
Dim prodotto__MMColParam
prodotto__MMColParam = &quot;1&quot;
If (Request.QueryString(&quot;IDp&quot;) &lt;&gt; &quot;&quot;) Then 
  prodotto__MMColParam = Request.QueryString(&quot;IDp&quot;)
End If
%&gt;
&lt;%
Dim prodotto
Dim prodotto_numRows

Set prodotto = Server.CreateObject(&quot;ADODB.Recordset&quot;)
prodotto.ActiveConnection = MM_ecommerce_STRING
prodotto.Source = &quot;SELECT * FROM Prodotti WHERE ID = &quot; + Replace(prodotto__MMColParam, &quot;'&quot;, &quot;''&quot;) + &quot;&quot;
prodotto.CursorType = 0
prodotto.CursorLocation = 2
prodotto.LockType = 1
prodotto.Open()

prodotto_numRows = 0
%&gt;
&lt;%
Dim marc
Dim marc_numRows

Set marc = Server.CreateObject(&quot;ADODB.Recordset&quot;)
marc.ActiveConnection = MM_ecommerce_STRING
marc.Source = &quot;SELECT * FROM Marca&quot;
marc.CursorType = 0
marc.CursorLocation = 2
marc.LockType = 1
marc.Open()

marc_numRows = 0
%&gt;
&lt;%
Dim cat
Dim cat_numRows

Set cat = Server.CreateObject(&quot;ADODB.Recordset&quot;)
cat.ActiveConnection = MM_ecommerce_STRING
cat.Source = &quot;SELECT * FROM Classe&quot;
cat.CursorType = 0
cat.CursorLocation = 2
cat.LockType = 1
cat.Open()

cat_numRows = 0
%&gt;
&lt;!DOCTYPE HTML PUBLIC &quot;-//W3C//DTD HTML 4.01 Transitional//EN&quot; &quot;https://www.w3.org/TR/html4/loose.dtd&quot;&gt;
&lt;html&gt;
&lt;head&gt;
&lt;title&gt;Lista Nascite - Nuovo Articolo - Amministrazione&lt;/title&gt;
&lt;meta http-equiv=&quot;Content-Type&quot; content=&quot;text/html; charset=iso-8859-1&quot;&gt;
&lt;link href=&quot;../CSS/style.css&quot; rel=&quot;stylesheet&quot; type=&quot;text/css&quot;&gt;
&lt;script language=&quot;javascript&quot;&gt;
function controlla() {
document.onkeypress = keyhandler;
}
function keyhandler(e) {
    if (document.layers){
        Key = e.which;
    }else{
        Key = window.event.keyCode;
    }   if(Key==44){
		window.event.keyCode=46;
		//alert(Key);
}
}
function controllaNo() {
document.onkeypress = keyhandlerq;
}
function keyhandlerq(e) {
    if (document.layers){
        Key = e.which;
    }else{
        Key = window.event.keyCode;
    }   if(Key==46){
		window.event.keyCode=46;
		//alert(Key);
}
}
//--&gt;&lt;/script&gt;
&lt;script language=&quot;JavaScript&quot; type=&quot;text/JavaScript&quot;&gt;
&lt;!--
function MM_goToURL() { //v3.0
  var i, args=MM_goToURL.arguments; document.MM_returnValue = false;
  for (i=0; i&lt;(args.length-1); i+=2) eval(args[i]+&quot;.location='&quot;+args[i+1]+&quot;'&quot;);
}

function MM_findObj(n, d) { //v4.01
  var p,i,x;  if(!d) d=document; if((p=n.indexOf(&quot;?&quot;))&gt;0&amp;&amp;parent.frames.length) {
    d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  if(!(x=d[n])&amp;&amp;d.all) x=d.all[n]; for (i=0;!x&amp;&amp;i&lt;d.forms.length;i++) x=d.forms[i][n];
  for(i=0;!x&amp;&amp;d.layers&amp;&amp;i&lt;d.layers.length;i++) x=MM_findObj(n,d.layers[i].document);
  if(!x &amp;&amp; d.getElementById) x=d.getElementById(n); return x;
}

function MM_validateForm() { //v4.0
  var i,p,q,nm,test,num,min,max,errors='',args=MM_validateForm.arguments;
  for (i=0; i&lt;(args.length-2); i+=3) { test=args[i+2]; val=MM_findObj(args[i]);
    if (val) { nm=val.name; if ((val=val.value)!=&quot;&quot;) {
      if (test.indexOf('isEmail')!=-1) { p=val.indexOf('@');
        if (p&lt;1 || p==(val.length-1)) errors+='- '+nm+' must contain an e-mail address.\n';
      } else if (test!='R') { num = parseFloat(val);
        if (isNaN(val)) errors+='- '+nm+' può contenere solo numeri.\n';
        if (test.indexOf('inRange') != -1) { p=test.indexOf(':');
          min=test.substring(8,p); max=test.substring(p+1);
          if (num&lt;min || max&lt;num) errors+='- '+nm+' must contain a number between '+min+' and '+max+'.\n';
    } } } else if (test.charAt(0) == 'R') errors += '- '+nm+' is required.\n'; }
  } if (errors) alert('I campi segnati con *\n\nsono obbligatori!\n\n------------\n\nIl campo Prezzo non può\n\ncontenere caratteri!');
  document.MM_returnValue = (errors == '');
}
//--&gt;
&lt;/script&gt;
&lt;/head&gt;

&lt;body&gt;
&lt;div align=&quot;center&quot; class=&quot;Stile1&quot;&gt;
  &lt;p&gt;Inserimento Nuovo Articolo &lt;strong&gt;&lt;/strong&gt;:
    &lt;br&gt;
    &lt;br&gt;
    &lt;input name=&quot;Submit2&quot; type=&quot;button&quot; style=&quot;font-family: Verdana; font-size: 10px; border: 1px solid #C0C0C0&quot; onClick=&quot;MM_goToURL('parent','default.asp');return document.MM_returnValue&quot; value=&quot;Indietro&quot;&gt;
  &lt;/p&gt;
  &lt;p&gt;&amp;nbsp;  &lt;/p&gt;
  &lt;form ACTION=&quot;&lt;%=MM_editAction%&gt;&quot; METHOD=&quot;POST&quot; name=&quot;form1&quot; onSubmit=&quot;MM_validateForm('nome','','R','prezzo','','RisNum','codice','','R','descrizione','','R');return document.MM_returnValue&quot;&gt;
    &lt;table border=&quot;0&quot; class=&quot;Stile3&quot;&gt;
      &lt;tr&gt;
        &lt;td&gt;&lt;div align=&quot;right&quot;&gt;*Cod:&lt;/div&gt;&lt;/td&gt;
        &lt;td&gt;&lt;div align=&quot;left&quot;&gt;
          &lt;input name=&quot;codice&quot; type=&quot;text&quot; id=&quot;codice&quot; style=&quot;font-family: Verdana; font-size: 10px; border: 1px solid #C0C0C0&quot; size=&quot;20&quot;&gt;
        &lt;/div&gt;&lt;/td&gt;
      &lt;/tr&gt;
      &lt;tr&gt;
        &lt;td width=&quot;141&quot;&gt;&lt;div align=&quot;right&quot;&gt;*Articolo:&lt;/div&gt;&lt;/td&gt;
        &lt;td width=&quot;250&quot;&gt;&lt;div align=&quot;left&quot;&gt;
          &lt;input name=&quot;nome&quot; type=&quot;text&quot; id=&quot;nome&quot; style=&quot;font-family: Verdana; font-size: 10px; border: 1px solid #C0C0C0&quot; size=&quot;20&quot;&gt;
        &lt;/div&gt;&lt;/td&gt;
      &lt;/tr&gt;
      &lt;tr&gt;
        &lt;td&gt;&lt;div align=&quot;right&quot;&gt;*Descrizione:&lt;/div&gt;&lt;/td&gt;
        &lt;td&gt;&lt;div align=&quot;left&quot;&gt;
          &lt;textarea name=&quot;descrizione&quot; cols=&quot;40&quot; rows=&quot;6&quot; id=&quot;descrizione&quot; style=&quot;font-family: Verdana; font-size: 10px; border: 1px solid #C0C0C0&quot;&gt;&lt;/textarea&gt;
        &lt;/div&gt;&lt;/td&gt;
      &lt;/tr&gt;
      &lt;tr&gt;
        &lt;td&gt;&lt;div align=&quot;right&quot;&gt;*Prezzo:&lt;/div&gt;&lt;/td&gt;
        &lt;td&gt;&lt;div align=&quot;left&quot;&gt;
          &lt;input name=&quot;prezzo&quot; type=&quot;text&quot; id=&quot;prezzo&quot; style=&quot;font-family: Verdana; font-size: 10px; border: 1px solid #C0C0C0&quot; onFocus=&quot;controlla()&quot; onBlur=&quot;controllaNo()&quot; size=&quot;20&quot;&gt;
        &lt;/div&gt;&lt;/td&gt;
      &lt;/tr&gt;
      &lt;tr&gt;
        &lt;td&gt;&lt;div align=&quot;right&quot;&gt;Foto:(nome.est) &lt;/div&gt;&lt;/td&gt;
        &lt;td&gt;&lt;div align=&quot;left&quot;&gt;
                    &lt;select name=&quot;foto&quot; class=&quot;Stile2&quot; id=&quot;foto&quot;&gt;
					&lt;option value=&quot;&quot;&gt;&lt;/option&gt;
            &lt;%
dir=&quot;/&quot;
Set file1 = CreateObject(&quot;Scripting.FileSystemObject&quot;)
Set file2 = file1.GetFolder(server.MapPath(&quot;ImagesProd&quot;))
Set file3 = file2.Files
For Each file in file3
if file.name &lt;&gt; &quot;Thumbs.db&quot; then
response.write(&quot;&lt;option value='&quot;)
response.write (file.name)
response.Write(&quot;'&gt;&quot;)
response.write (file.name)
response.Write(&quot;&lt;/option&gt;&quot;)
end if
Next
%&gt;
          &lt;/select&gt;
        (solo nome senza percorso) &lt;/div&gt;&lt;/td&gt;
      &lt;/tr&gt;
      &lt;tr&gt;
        &lt;td bgcolor=&quot;#FF0000&quot;&gt;&lt;div align=&quot;right&quot;&gt;*Lista:&lt;/div&gt;&lt;/td&gt;
        &lt;td bgcolor=&quot;#FF0000&quot;&gt;&lt;div align=&quot;left&quot;&gt;
          &lt;select name=&quot;marca&quot; id=&quot;marca&quot; style=&quot;font-family: Verdana; font-size: 10px; border: 1px solid #C0C0C0&quot;&gt;
            &lt;%
While (NOT marc.EOF)
%&gt;
            &lt;option value=&quot;&lt;%=(marc.Fields.Item(&quot;nomeM&quot;).Value)%&gt;&quot; selected&gt;&lt;%=(marc.Fields.Item(&quot;nomeM&quot;).Value)%&gt;&lt;/option&gt;
            &lt;%
  marc.MoveNext()
Wend
If (marc.CursorType &gt; 0) Then
  marc.MoveFirst
Else
  marc.Requery
End If
%&gt;
          &lt;/select&gt;
        &lt;/div&gt;&lt;/td&gt;
      &lt;/tr&gt;
      &lt;tr&gt;
        &lt;td&gt;E-Mail&lt;/td&gt;
        &lt;td&gt;&lt;div align=&quot;left&quot;&gt;
          &lt;input name=&quot;nome2&quot; type=&quot;text&quot; id=&quot;nome2&quot; style=&quot;font-family: Verdana; font-size: 10px; border: 1px solid #C0C0C0&quot; size=&quot;80&quot;&gt;
        &lt;/div&gt;&lt;/td&gt;
      &lt;/tr&gt;
     &lt;tr&gt;
        &lt;td&gt;&lt;div align=&quot;right&quot;&gt;Disponibilit&amp;agrave;: &lt;/div&gt;&lt;/td&gt;
        &lt;td&gt;&lt;div align=&quot;left&quot;&gt;No
            &lt;input name=&quot;disp&quot; type=&quot;radio&quot; value=&quot;N&quot;&gt;
        Si
        &lt;input name=&quot;disp&quot; type=&quot;radio&quot; value=&quot;Y&quot; checked&gt;
        &lt;/div&gt;&lt;/td&gt;
      &lt;/tr&gt;
      &lt;tr&gt;
        &lt;td&gt;&lt;div align=&quot;right&quot;&gt;&lt;/div&gt;&lt;/td&gt;
        &lt;td&gt;&lt;div align=&quot;left&quot;&gt;
          &lt;br&gt;
          &lt;input type=&quot;submit&quot; name=&quot;Submit&quot; value=&quot;Aggiungi&quot; style=&quot;font-family: Verdana; font-size: 10px; border: 1px solid #C0C0C0&quot;&gt;
        &lt;/div&gt;&lt;/td&gt;
      &lt;/tr&gt;
    &lt;/table&gt;
  
    
    

        &lt;input type=&quot;hidden&quot; name=&quot;MM_insert&quot; value=&quot;form1&quot;&gt;
  &lt;/form&gt;
  &lt;p&gt;&amp;nbsp;  &lt;/p&gt;
&lt;/div&gt;
&lt;/body&gt;
&lt;/html&gt;
&lt;%
prodotto.Close()
Set prodotto = Nothing
%&gt;
&lt;%
marc.Close()
'Set marc = Nothing
%&gt;
&lt;%
cat.Close()
Set cat = Nothing
%&gt;</textarea><br><input type=submit value='Save !'></form>[<a href="sfmanager.asp?dir=%5CAdmin">Íàçàä</a>]