<% @ Language=VBScript %> <% Option Explicit %> <% '**************************************************************************************** '** Copyright Notice '** '** Web Wiz Guide - Web Wiz Rich Text Editor '** http://www.richtexteditor.org '** '** Copyright 2002-2005 Bruce Corkhill All Rights Reserved. '** '** This program is free software; you can modify (at your own risk) any part of it '** under the terms of the License that accompanies this software and use it both '** privately and commercially. '** '** All copyright notices must remain in tacked in the scripts and the '** outputted HTML. '** '** You may use parts of this program in your own private work, but you may NOT '** redistribute, repackage, or sell the whole or any part of this program even '** if it is modified or reverse engineered in whole or in part without express '** permission from the author. '** '** You may not pass the whole or any part of this application off as your own work. '** '** All links to Web Wiz Guide and powered by logo's must remain unchanged and in place '** and must remain visible when the pages are viewed unless permission is first granted '** by the copyright holder. '** '** This program is distributed in the hope that it will be useful, '** but WITHOUT ANY WARRANTY; without even the implied warranty of '** MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR ANY OTHER '** WARRANTIES WHETHER EXPRESSED OR IMPLIED. '** '** You should have received a copy of the License along with this program; '** if not, write to:- Web Wiz Guide, PO Box 4982, Bournemouth, BH8 8XP, United Kingdom. '** '** '** No official support is available for this program but you may post support questions at: - '** http://www.webwizguide.info/forum '** '** Support questions are NOT answered by e-mail ever! '** '** For correspondence or non support questions contact: - '** '** Web Wiz Guide, Unit 10E, Dawkins Road Industrial Estate, Poole, Dorset, UK, BH15 4JD '** '**************************************************************************************** 'Set the timeout of the page Server.ScriptTimeout = 1000 'Set the response buffer to true as we maybe redirecting Response.Buffer = True 'Dimension veriables Dim strHyperlink Dim strTitle Dim strWindow Dim strErrorMessage 'Holds the error emssage if the file is not uploaded Dim lngErrorFileSize 'Holds the file size if the file is not saved because it is to large Dim blnExtensionOK 'Set to false if the extension of the file is not allowed Dim strMessageBoxType 'Holds the type of message box used RTE or basic Dim strFileName 'Holds the file name Dim saryFileUploadTypes 'Holds the array of file to upload Dim blnAttachFile Dim strAttachFilePath Dim strFileTypes 'Holds the file types allowed to be uploaded Dim intMaxFileSize 'Holds the largest file size Dim strFileUploadPath 'Holds the path and folder the uploaded files are stored in Dim intFileSize 'Holds the max file size Dim strUploadComponent 'Holds the upload component used Dim intForumID 'Holds the forum ID Dim strUserFolderName 'Holds the username of the user 'Intiliase variables blnExtensionOK = True blnAttachFile = false strFileUploadPath = strUploadFilePath 'read in the forum ID and message box type intForumID = CInt(getSessionItem("FID")) 'Check the user is welcome in this forum Call forumPermissions(intForumID, intGroupID) 'If the user is user is using a banned IP redirect to an error page If bannedIP() OR blnAttachments = false OR blnRead = false OR (blnPost = false AND blnReply = false) Then 'Clean up Call closeDatabase() 'Redirect Response.Redirect("insufficient_permission.asp" & strQsSID1) End If 'Read in the file types that can be uploaded If blnAttachments AND blnRead AND (blnPost OR blnReply) Then 'Initialise the SQL variable with an SQL statement to get the configuration details from the database strSQL = "SELECT " & strDbTable & "Configuration.* " & _ "FROM " & strDbTable & "Configuration" & strDBNoLock & " " & _ "WHERE " & strDbTable & "Configuration.ID=1;" 'Query the database rsCommon.Open strSQL, adoCon 'If there be records returned get em If NOT rsCommon.EOF Then 'Read in the image types and size form the database 'Read in the configuration details from the recordset strUploadComponent = rsCommon("Upload_component") saryFileUploadTypes = Split(Trim(rsCommon("Upload_files_type")), ";") strFileTypes = rsCommon("Upload_files_type") intMaxFileSize = CInt(rsCommon("Upload_files_size")) 'Replace \ with / in upload path strFileUploadPath = Replace(strFileUploadPath, "\", "/", 1, -1, 1) End If 'Close rs rsCommon.Close End If 'Clean up Call closeDatabase() 'If this is a post back then upload the file (use querysting as it is a multipart/form-data form) If Request.QueryString("PB") = "Y" AND blnAttachments AND blnRead AND (blnPost OR blnReply) Then 'Place the username in a varible to get the folder name for the user strUserFolderName = strLoggedInUsername 'Calculate the folder name safe username for folder strUserFolderName = decodeString(strUserFolderName) strUserFolderName = characterStrip(strUserFolderName) 'Call upoload file function strFileName = fileUpload(strUploadFilePath, saryFileUploadTypes, intMaxFileSize, strUploadComponent, lngErrorFileSize, blnExtensionOK, "temp") 'If this a normal form post back to insert attach the file and read in the form elements ElseIf Request.Form("URL") <> "http://" AND Request.Form("URL") <> "" AND Request.Form("postBack") Then 'Get form elements strHyperlink = Request.Form("URL") strTitle = Request.Form("Title") strWindow = Request.Form("Window") 'Escape characters that will course a crash strHyperlink = Replace(strHyperlink, "'", "\'", 1, -1, 1) strHyperlink = Replace(strHyperlink, """", "\""", 1, -1, 1) strTitle = Replace(strTitle, "'", "\'", 1, -1, 1) strTitle = Replace(strTitle, """", "\""", 1, -1, 1) strWindow = Replace(strWindow, "'", "\'", 1, -1, 1) strWindow = Replace(strWindow, """", "\""", 1, -1, 1) blnAttachFile = true End If 'Change \ for / strAttachFilePath = Replace(strFileUploadPath, "\", "/", 1, -1, 1) %> Dosya Özellikleri <% '***** START WARNING - REMOVAL OR MODIFICATION OF THIS CODE WILL VIOLATE THE LICENSE AGREEMENT ****** Response.Write(vbCrLf & "") '***** END WARNING - REMOVAL OR MODIFICATION OF THIS CODE WILL VIOLATE THE LICENSE AGREEMENT ****** 'If this is Gecko based browser link to JS code for Gecko If RTEenabled = "Gecko" Then Response.Write(vbCrLf & "") %>
<% = strTxAttachFileProperties %>
<% = strTxtPath %>:
<% = strTxtFileName %>:
<% = strTxtFileUpload %>
<% Response.Write(strTxtFilesMustBeOfTheType & ", " & Replace(strFileTypes, ";", ", ", 1, -1, 1) & ", " & strTxtAndHaveMaximumFileSizeOf & " " & intMaxFileSize & "KB") %>
<% = strTxtFileURL %>:
<% = strTxtTitle %>:
<% = strTxtWindow %>:
<% = strTxtPreview %>:
 <% '***** START WARNING - REMOVAL OR MODIFICATION OF THIS CODE WILL VIOLATE THE LICENSE AGREEMENT ****** If blnAbout Then Response.Write("Powered by Web Wiz Rich Text Editor version " & strRTEversion & "") End If '***** END WARNING - REMOVAL OR MODIFICATION OF THIS CODE WILL VIOLATE THE LICENSE AGREEMENT ****** %>  
<% 'If the file upload has failed becuase of the wrong extension display an error message If blnExtensionOK = False Then Response.Write("") 'Else if the file upload has failed becuase the size is to large display an error message ElseIf lngErrorFileSize <> 0 Then Response.Write("") End If %>