codice:
<%
'Controlla se l'utente è loggato, in caso negativo lo rimanda a news_login.asp
If Session("Off_Logged") <> 1 Then
Response.Redirect("login.asp")
End If
%>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head >
<title>Bimbinvacanza.it - Gestione Offerte Speciali - Inserisci Offerta Speciale</title>
<script type="text/javascript" src="tiny_mce/tiny_mce.js"></script>
<script type="text/javascript">
tinyMCE.init({
theme : "advanced",
mode : "exact",
elements: "Insert_news",
/*plugins : "fullpage",*/
theme_advanced_buttons3_add : "forecolor"
});
</script>
<script type="text/javascript">
function ismaxlength(obj){
var mlength=obj.getAttribute? parseInt(obj.getAttribute("maxlength")) : ""
if (obj.getAttribute && obj.value.length>mlength)
obj.value=obj.value.substring(0,mlength)
}
</script>
</head>
<style>
body
{
background-color:#d7e7ff;/*background-color:#93b4dd;*/
/*background-color: #3e84e1;*/
margin: 0px 20px 20px 20px;border:0px;
text-align:left;
font-family: sans-serif;
font-size:12px;
}
/*h1
{
font: italic 20px sans-serif;
font-style: oblique;
text-align: center;
color: ##00337a;
}*/
.logo
{
margin-left:120px;
width:374px;
height:132px;
background-image: url(img/newsmanager.gif);
background-repeat:no-repeat;
}
.a
{
border:solid 1px #000000;
margin-right:5px;
float:right;
}
.maskform
{
border:solid 1px #dd2200;
margin-left:20px;
width:580px;
height:auto;
padding:10px;
background-color:#ffAA44;;
/*background-color:#93b4dd;*/
color:White;
font-weight:bold;
}
button
{
background: none;
margin:0px;border:0px;
padding:0px;
}
.modificanews
{
background-image: url(images/modifica_news.jpg);
background-repeat: no-repeat;
margin-top:8px;
width:116px;
height:37px;
}
</style>
<body>
<div class="logo"></div></br>
<%
Set Upload = New bylucianiUpload
Upload.AllowedExt = "gif, jpg, png, jpeg"
Upload.MaxFileSize = 10000000
Upload.Upload()
check = 1 'controllo per la validità degli input
if Upload.Form.Field("Titolo_Off").Value = "" then
%> <span style="margin-left:20px;font-size:18px;color:red;font-weight:bold">Errore, inserire un titolo valido.
Torna indietro.</span><%
check = 0
End If
if Upload.Form.Field("Prezzo_Off").Value = "" then
%> <span style="margin-left:20px;font-size:18px;color:red;font-weight:bold">Errore, inserire un prezzo valido.
Torna indietro.</span><%
check = 0
End If
if Upload.Form.Field("date3").Value = "" or Upload.Form.Field("date4").Value = "" then
%> <span style="margin-left:20px;font-size:18px;color:red;font-weight:bold">Errore, inserire la data di inizio e quella di scadenza.
Torna indietro.</span><%
check = 0
End If
if Upload.Form.Field("insoff").Value = "" then
%> <span style="margin-left:20px;font-size:18px;color:red;font-weight:bold">Errore, inserire un testo valido.
Torna indietro.</span><%
check = 0
End If
if not Upload.Files.File(1).IsMissing then
pathimg = PATH_OF_IMAGE & CInt(Rnd()*100) & Day(Now()) & Month(Now())
pathimg = pathimg & Upload.Files.File(1).FileName
'Upload.Files.File(1).SaveAs("/News/pictures/" + Day(Now()) + Month(Now()) + Upload.Files.File(1).FileName)
Upload.Files.File(1).SaveAs(pathimg)
End If
if check = 1 then
titolo = webtodb(Upload.Form.Field("Titolo_Off").Value) ' Salvo i valori filtrati
insoff = webtodb(Upload.Form.Field("insoff").Value)
datainizio = webtodb(Upload.Form.Field("date3").Value)
datafine = webtodb(Upload.Form.Field("date4").Value)
desc = webtodb(Upload.Form.Field("Descrizione_Off").Value)
scadenza = mid(datafine,1,2)&mid(datafine,4,2)&mid(datafine,7,4)
prezzo = webtodb(Upload.Form.Field("Prezzo_Off").Value)
if Upload.Files.File(1).IsMissing then
pathimg = "pictures/000def.gif"
else
pathimg = pathimg
End If
'Randomize()
'pathimg = PATH_OF_IMAGE & CInt(Rnd()*100)
'Randomize()
'pathimg = pathimg & CInt(Rnd()*10)
'pathimg = pathimg &"_"&Upload.UploadedFiles("Allegato_News").FileName
'connessione al DB
%><%
%><%
'Stringa SQLdi inserimento
SQL = "INSERT INTO offerte([regione], [struttura], [desc], user_ID, titolo, testo, data_inizio, data_fine, scadenza, prezzo, img_path)"
SQL = SQL & "VALUES ("
SQL = SQL & "'"&Session("Off_regione")&"', "
SQL = SQL & "'"&Session("Off_struttura")&"', "
SQL = SQL & "'"&desc&"', "
SQL = SQL & Session("Off_userID")&", "
SQL = SQL & "'"&titolo&"', "
SQL = SQL & "'"&insoff&"', "
SQL = SQL & "'"&datainizio&"', "
SQL = SQL & "'"&datafine&"', "
SQL = SQL & "'"&scadenza&"', "
SQL = SQL & "'"&prezzo&"', "
SQL = SQL & "'"&pathimg&"')"
Conn.Execute(SQL)
Conn.Close
%><span style="margin-left:20px;font-size:18px;color:green;font-weight:bold">Offerta inserita.
Chiudi.</span><%
End If
%>
</body>
</html>