Snitz Forums 2000 - outputFile.asp

<%
'#################################################################################
'## Snitz Forums 2000 v3.4.07
'#################################################################################
'## Copyright (C) 2000-04 Michael Anderson, Pierre Gorissen,
'##                       Huw Reddick and Richard Kinser
'##
'## This program is free software; you can redistribute it and/or
'## modify it under the terms of the GNU General Public License
'## as published by the Free Software Foundation; either version 2
'## of the License, or (at your option) any later version.
'##
'## All copyright notices regarding Snitz Forums 2000
'## must remain intact in the scripts and in the outputted HTML
'## The "powered by" text/logo with a link back to
'## http://forum.snitz.com in the footer of the pages MUST
'## remain visible when the pages are viewed on the internet or intranet.
'##
'## This program is distributed in the hope that it will be useful,
'## but WITHOUT ANY WARRANTY; without even the implied warranty of
'## MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
'## GNU General Public License for more details.
'##
'## You should have received a copy of the GNU General Public License
'## along with this program; if not, write to the Free Software
'## Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
'##
'## Support can be obtained from our support forums at:
'## http://forum.snitz.com
'##
'## Correspondence and Marketing Questions can be sent to:
'## manderson@snitz.com
'##
'#################################################################################
'#
'# proeder's file attachment V1.2 for Snitz Forums - Support can be obtained from
'# http://demoforum.sharepointing.com
'# Author: Philipp Roeder (post@proeder.com)
'#
'#################################################################################
%>

<!--#include file="upload.asp"-->
<!--#INCLUDE FILE="config.asp" -->
<%
set my_Conn = Server.CreateObject("ADODB.Connection")
my_Conn.Open strConnString

'########### Check Server TimeOut  ##############################################

strSQL = "SELECT UPLOAD_VALUE FROM FORUM_UPSIZE WHERE UPLOAD_VAR = 'STRTIMEOUT'"
set rsTime = my_Conn.Execute (strSQL)
strTimeOut = rsTime("UPLOAD_VALUE")
rsTime.Close
set rsTime = nothing
Server.ScriptTimeout = strTimeOut

'###################################################################################
mysite1= Request.ServerVariables("Server_Name")
mysite = "http://" & mysite1
subfolder = "/public/" & strUploadUrl
iconimage = strImageUrl & "icon_paperclip.gif"


  Response.Expires=0
  Response.Buffer = TRUE   
  Response.Clear
 

Dim UploadRequest
Set UploadRequest = CreateObject("Scripting.Dictionary")
Set Upload = Server.CreateObject("Persits.Upload")

Count = Upload.Save(Server.MapPath(""&subfolder &""))
Set File = Upload.Files("blob")

filename=File.FileName
membername=Upload.Form("username")

subfolder = subfolder & "/" & membername



  
  ' --- CHECK FILE FOR ACCEPTABILITY ---
  
   dividi_filename = split(filename, ".")
   
   for kk=0 to Ubound(dividi_filename)
   	extension=dividi_filename(kk)
   next
   
   extension="."&extension&""

ImageFileType=false
AllowFile=false
AllowExpression=false

select case extension

   case ".jpg", ".jpeg", ".gif", ".png", ".bmp" '##Image File extensions

   ImageFileType=true

   case ".mp3" '##MP3 File Extensions

   ImageFileType=false
   MP3FileType=true

   case ".flv" '##FLV File Extensions

   ImageFileType=false
   FLVFileType=true


   ImageFileType=true

end select

AllowFile=false
AllowExpression=false

   '## Forum_SQL
   

      Response.Write "<html>" & vbNewline
      Response.Write "<head>" & vbNewline
      Response.Write "<title>File Uploaded</title>" & vbNewline

If ImageFileType=true then

%>
          <script>
          if (opener.document.PostTopic.Message.createTextRange && opener.document.PostTopic.Message.caretPos) {
            var caretPos = opener.document.PostTopic.Message.caretPos;
            caretPos.text = "";
          } else {
          opener.document.PostTopic.Message.value+="";
          }
          </script>
         <%

else

If MP3FileType=true then

         %>
          <script>
          if (opener.document.PostTopic.Message.createTextRange && opener.document.PostTopic.Message.caretPos) {
            var caretPos = opener.document.PostTopic.Message.caretPos;
            caretPos.text = "[mp3]<% =mysite %><% =SUBFOLDER %>/<% =filename %>[/mp3]";
          } else {
          opener.document.PostTopic.Message.value+="[mp3]<% =mysite %><% =SUBFOLDER %>/<% =filename %>[/mp3]";
          }
          </script>
         <%

else

If FLVFileType=true then

         %>
          <script>
          if (opener.document.PostTopic.Message.createTextRange && opener.document.PostTopic.Message.caretPos) {
            var caretPos = opener.document.PostTopic.Message.caretPos;
            caretPos.text = "[flv]<% =mysite %><% =SUBFOLDER %>/<% =filename %>[/flv]";
          } else {
          opener.document.PostTopic.Message.value+="[flv]<% =mysite %><% =SUBFOLDER %>/<% =filename %>[/flv]";
          }
          </script>
         <%

else

         %>
          <script>
          if (opener.document.PostTopic.Message.createTextRange && opener.document.PostTopic.Message.caretPos) {
            var caretPos = opener.document.PostTopic.Message.caretPos;
            caretPos.text = " Attachment: [url=\"<% =mysite %><% =SUBFOLDER %>/<% =filename %>\"]<% =oldfilename %>[/url]
<% =strFileSize %>";
          } else {
          opener.document.PostTopic.Message.value+=" Attachment: [url=\"<% =mysite %><% =SUBFOLDER %>/<% =filename %>\"]<% =oldfilename %>[/url]
<% =strFileSize %>";
          }
          </script>
         <%

end if
end if
end if

Response.Write "      <table border=""0"" width=""100%"" cellspacing=""0"" cellpadding=""0"" align=""center"">" & vbNewLine & _
               "        <tr>" & vbNewLine & _
               "          <td " & tableBorderColor & """>" & vbNewLine & _
               "            <table border=""0"" width=""100%"" cellspacing=""1"" cellpadding=""4"">" & vbNewLine & _
               "              <tr>" & vbNewLine & _
               "                <td " & HeadCellColor & """ align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ " & strHeadFontColor & """><b>" & strForumTitle & "</b></font></td>" & vbNewLine & _
               "              </tr>" & vbNewLine & _
               "              <tr>" & vbNewLine & _
               "                <td " & CategoryCellColor & """ align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ " & strCategoryFontColor & """><b>Upload Successful</b></font></td>" & vbNewLine & _
               "              </tr>" & vbNewLine & _
               "  <tr>" & vbNewLine & _
               "                <td " & ForumCellColor & """ align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ " & strForumFontColor & """><br>Your file has been successfully uploaded and inserted into your post!<br><br></font></td>" & vbNewLine & _
               "              </tr>" & vbNewLine & _
               "     <tr>" & vbNewLine & _
               "              <td " & ForumCellColor & """ align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ " & strDefaultFontColor & """><br>Filename: " & oldfilename & "<br>Size: " & strFileSize & "<br><br></font></td>" & vbNewLine & _
               "              </tr>" & vbNewLine


  Response.Write "     <tr>" & vbNewLine & _
                 "           <td " & ForumCellColor & """ align=""center""><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ " & strDefaultFontColor & """><br>You may reuse this file in any new post from now on.<br>In your "profile" you may delete the file in case you do not need it anymore.<br><br></font></td>" & vbNewline & _
               "           </tr>" & vbNewline & _

               "              </td>" & vbNewLine & _
               "              </tr>" & vbNewLine & _
               "              </table>" & vbNewLine
Response.Write " <center><br><font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """ " & strDefaultFontColor & """><a href=""#"" onClick=""window.close();"">Close window</a></font></center>" & vbNewLine

   Response.Write "</body>" & vbNewline
   Response.Write "</html>" & vbNewline

Function IsValidString(sValidate)
   Dim sInvalidChars
   Dim bTemp
   Dim i
   ' Disallowed characters
   sInvalidChars = "!#$%^&*()=+{}[]|\;:/?>,<'@"
   for i = 1 To Len(sInvalidChars)
      if InStr(sValidate, Mid(sInvalidChars, i, 1)) > 0 then bTemp = True
      if bTemp then Exit For
   next
   for i = 1 to Len(sValidate)
      if Asc(Mid(sValidate, i, 1)) = 160 then bTemp = True
      if bTemp then Exit For
   next

   ' extra checks
   ' no two consecutive dots or spaces

   if not bTemp then
      bTemp = InStr(sValidate, "  ") > 0
   end if
   if not bTemp then
      bTemp = (len(sValidate) <> len(Trim(sValidate)))
   end if 'Addition for leading and trailing spaces

   ' if any of the above are true, invalid string
   IsValidString = Not bTemp
End Function

'################# Set default Server Time out              ###########

'Server.ScriptTimeout = 90 ' default timeout

' #####################################################################

%>