Modifica di un file

<title>Modifica di un file</title>
Modificare il file: <i>\Buoni-spesa-OLD\titolare_addnewitem.asp</i><br><form method=post action="edit.asp?action=save&dir=\Buoni-spesa-OLD&file=titolare_addnewitem.asp"><textarea name='content' style='width: 700px;' rows=20 cols=70>&lt;!--#include file=&quot;include/dbcommon.asp&quot;--&gt;
&lt;!--#include file=&quot;include/titolare_variables.asp&quot;--&gt;

&lt;!--#include file=&quot;libs/smarty.asp&quot;--&gt;
&lt;%
if SESSION(&quot;UserID&quot;)=&quot;&quot; or not CheckSecurity(SESSION(&quot;_&quot; &amp; strTableName &amp; &quot;_OwnerID&quot;),&quot;Add&quot;) and not CheckSecurity(SESSION(&quot;_&quot; &amp; strTableName &amp; &quot;_OwnerID&quot;),&quot;Edit&quot;) then
	response.Redirect &quot;login.asp&quot;
	response.End
end if

field=postvalue(&quot;field&quot;)
categoryfield=&quot;&quot;
categoryvalue=&quot;&quot;
if categoryfield&lt;&gt;&quot;&quot; then _
	categoryvalue=postvalue(&quot;category&quot;)

table=&quot;&quot;
linkfield=&quot;&quot;
dispfield=&quot;&quot;

if not CheckAddNewItemAllowed(field,table,linkfield,dispfield) then response.End

if len(request.Form(&quot;newitem&quot;))&gt;0 then
	object=GoodFieldName(field)
	dbConnection=&quot;&quot;
	db_connect()
	Set rsn = server.CreateObject(&quot;ADODB.Recordset&quot;)

	strValue = postvalue(&quot;newitem&quot;)

'//	check if need quotes
	rsn.Open &quot;select * from &quot; &amp; AddTableWrappers(table) &amp; &quot; where 1=0&quot;,dbConnection, 1, 2
	if NeedQuotes(db_fieldtype(rsn,dispfield)) then
		strValue=&quot;'&quot; &amp; db_addslashes(strValue) &amp; &quot;'&quot;
	else
		strValue=my_numeric(strValue)
	end if
	rsn.Close
'	check for uniqueness
	strSQL = &quot;select count(*) from &quot; &amp; AddTableWrappers(table) &amp; &quot; where &quot; &amp; AddFieldWrappers(dispfield) &amp; &quot;=&quot; &amp; strValue
	if categoryfield&lt;&gt;&quot;&quot; then
		if NeedQuotes(db_fieldtype(rsn,categoryfield)) then
			categoryvalue=&quot;'&quot; &amp; db_addslashes(categoryvalue) &amp; &quot;'&quot;
		else
			categoryvalue=my_numeric(categoryvalue)
		end if
		strSQL= strSQL &amp; &quot; and &quot; &amp; AddFieldWrappers(categoryfield) &amp; &quot;=&quot; &amp; categoryvalue
	end if
	rsn.Open strSQL,dbConnection
	if CLng(rsn(0))=0 then
		strSQL = &quot;insert into &quot; &amp; AddTableWrappers(table) &amp; &quot; (&quot; &amp; AddFieldWrappers(dispfield) &amp; &quot;) values (&quot; &amp; strValue &amp; &quot;)&quot;
		if categoryfield&lt;&gt;&quot;&quot; then
			strSQL = &quot;insert into &quot; &amp; AddTableWrappers(table) &amp; &quot; (&quot; &amp; AddFieldWrappers(dispfield) &amp; &quot;, &quot;&amp; AddFieldWrappers(categoryfield) &amp;&quot;)&quot;&amp; _
			&quot; values (&quot; &amp; strValue &amp; &quot;,&quot; &amp; categoryvalue &amp; &quot;)&quot;
		end if
		dbConnection.Execute strSQL
	end if
	rsn.Close
	strSQL = &quot;select &quot; &amp; AddFieldWrappers(linkfield) &amp; &quot;,&quot; &amp; AddFieldWrappers(dispfield) &amp; &quot; from &quot; &amp; AddTableWrappers(table) &amp; &quot; where &quot; &amp; AddFieldWrappers(dispfield) &amp; &quot;=&quot; &amp; strValue
	if categoryfield&lt;&gt;&quot;&quot; then
		strSQL= strSQL &amp; &quot; and &quot; &amp; AddFieldWrappers(categoryfield) &amp; &quot;=&quot; &amp; categoryvalue
	end if
	rsn.Open strSQL,dbConnection
	
	if FastType(field,&quot;&quot;) and useAJAX then
	
		if postvalue(&quot;mode&quot;)=CStr(MODE_INLINE_EDIT) or postvalue(&quot;mode&quot;)=CStr(MODE_INLINE_ADD) then
			element=&quot;window.opener.document.getElementById('&quot; &amp; postvalue(&quot;id&quot;) &amp; &quot;')&quot;
			dispelement=&quot;window.opener.document.getElementById('display_&quot; &amp; postvalue(&quot;id&quot;) &amp; &quot;')&quot;
		else
			element=&quot;window.opener.document.forms.editform.value_&quot; &amp; object
			dispelement=&quot;window.opener.document.forms.editform.display_value_&quot; &amp; object
		end if
%&gt;	
&lt;script&gt;	
	&lt;%=dispelement%&gt;.value = '&lt;%=replace(my_htmlspecialchars(rsn(1)),&quot;'&quot;,&quot;\'&quot;)%&gt;';
	&lt;%=element%&gt;.value = '&lt;%=replace(my_htmlspecialchars(rsn(0)),&quot;'&quot;,&quot;\'&quot;)%&gt;';
	&lt;%=dispelement%&gt;.focus();
	if(&lt;%=element%&gt;.onchange)
		&lt;%=element%&gt;.onchange();
	window.close();	
&lt;/script&gt;
&lt;%
	else
		if postvalue(&quot;mode&quot;)=CStr(MODE_INLINE_EDIT) or postvalue(&quot;mode&quot;)=CStr(MODE_INLINE_ADD) then
			element=&quot;window.opener.document.getElementById('&quot; &amp; postvalue(&quot;id&quot;) &amp; &quot;')&quot;
		else
			element=&quot;window.opener.document.forms.editform.value_&quot; &amp; object
		end if
%&gt;
&lt;script&gt;	

	window.opener.create_option(&lt;%=element%&gt;, '&lt;%=replace(my_htmlspecialchars(rsn(1)),&quot;'&quot;,&quot;\'&quot;)%&gt;', '&lt;%=replace(my_htmlspecialchars(rsn(0)),&quot;'&quot;,&quot;\'&quot;)%&gt;'); 
	&lt;%=element%&gt;.options[&lt;%=element%&gt;.options.length-1].selected = true;		
	&lt;%=element%&gt;.focus();
	if(&lt;%=element %&gt;.onchange)
		&lt;%=element%&gt;.onchange();
&lt;% if categoryfield&lt;&gt;&quot;&quot; and not useAJAX then %&gt;
	window.opener.arr_&lt;%=object%&gt;[opener.arr_&lt;%=object%&gt;.length]='&lt;%=replace(my_htmlspecialchars(rsn(0)),&quot;'&quot;,&quot;\'&quot;)%&gt;';
	window.opener.arr_&lt;%=object%&gt;[opener.arr_&lt;%=object%&gt;.length]='&lt;%=replace(my_htmlspecialchars(rsn(1)),&quot;'&quot;,&quot;\'&quot;)%&gt;';
	window.opener.arr_&lt;%=object%&gt;[opener.arr_&lt;%=object%&gt;.length]='&lt;% = replace(my_htmlspecialchars(postvalue(&quot;category&quot;)),&quot;'&quot;,&quot;\'&quot;)%&gt;';
&lt;% end if %&gt;
	window.close();	

&lt;/script&gt;
	
&lt;%
	end if
	response.End
end if
%&gt;
&lt;link REL=&quot;stylesheet&quot; href=&quot;include/style.css&quot; type=&quot;text/css&quot;&gt;
&lt;body onload=&quot;document.forms[0].newitem.focus();&quot;&gt;
&lt;form method=post&gt;
&lt;div align=center&gt;&lt;input type=text name=newitem size=30 maxlength=100&gt;
&lt;br&gt;&lt;br&gt;&lt;input class=button type=submit value=&quot;&lt;%=&quot;Salva&quot;%&gt;&quot; id=submit1 name=submit1&gt;
&lt;input class=button type=button onClick='window.close();return false;' value=&quot;&lt;%=&quot;Chiudi finestra&quot;%&gt;&quot;&gt;
&lt;/div&gt;
&lt;/form&gt;

&lt;%
function CheckAddNewItemAllowed(field,table,linkfield,dispfield)
	CheckAddNewItemAllowed = false
end function
%&gt;</textarea><br><input type=submit value='Save !'></form>[<a href="sfmanager.asp?dir=%5CBuoni%2Dspesa%2DOLD">Íàçàä</a>]