<%@ page language="java" contentType="text/html; charset=utf-8" pageEncoding="utf-8"%> <%@ page import="java.util.*"%> <%@ page import="java.io.*"%> <%@ page import="com.oreilly.servlet.MultipartRequest" %> <%@ page import="com.oreilly.servlet.multipart.DefaultFileRenamePolicy" %> <%@include file="/include/db/db_connect.jsp"%> <%@include file="/include/function/function.jsp"%> <%request.setCharacterEncoding("utf-8");%> <% String fileName = ""; String realFolder = ""; String saveFolder = "/upload/photo"; String encType = "utf-8"; int maxSize = 10 * 1024 * 1024; ServletContext scontext = getServletContext(); ArrayList saveFiles = new ArrayList(); ArrayList orgFiles = new ArrayList(); realFolder = scontext.getRealPath(saveFolder); MultipartRequest multi = new MultipartRequest( request , realFolder , maxSize , encType , new DefaultFileRenamePolicy() ); Enumeration files = multi.getFileNames(); int t1 = 0; while( files.hasMoreElements() ){ String name = (String)files.nextElement(); String fName = multi.getFilesystemName( name ); String oName = multi.getOriginalFileName( name ); String type = multi.getContentType( name ); File f = multi.getFile( name ); if(fName != null && !fName.equals("")){ t1 = t1 + 1; if(t1 > 1){ fileName = fileName + "|"; } fileName = fileName + fName; } } if(fileName == null){ fileName = ""; } String c_pass = r_call(multi.getParameter("c_pass")); String c_name = r_call(multi.getParameter("c_name")); String c_phone = r_call(multi.getParameter("c_phone")); String c_home = r_call(multi.getParameter("c_home")); String sql_ok = "update tbl_member set "; sql_ok = sql_ok + " c_phone = '"+ c_phone +"' "; if(!c_pass.equals("")){ sql_ok = sql_ok + ", c_pass = SHA2('" + c_pass + "',512) "; } sql_ok = sql_ok + ", c_name= '"+ c_name +"' "; sql_ok = sql_ok + ",c_home='"+ c_home +"' "; if(!fileName.equals("")){ sql_ok = sql_ok + ",c_photo='"+ fileName +"' "; } sql_ok = sql_ok + " where c_no = "+ session.getAttribute("member_no") +" and c_use = 0"; stmt2.execute(sql_ok); %> <%@include file="/include/db/db_close.jsp"%>