<!--#include file="info.asp"-->
<!--#include file="conn.asp"-->
<%
if session("id")="" or session("ac")="" or session("user")<>"1" then
response.write "<script language=JavaScript>" & chr(13) & "alert('您不具備此權限！');"&"window.location.href = 'index.asp'"&" </script>"
Response.End
end if
%>
<%

set rs=server.createobject("adodb.recordset")
  sql="update in_user set pic='"&request("bookpic")&"' where id="&clng(session("id"))
  rs.Open sql,conn,1,2
%>
<script language="vbscript">
  alert ("照片上傳成功")
  window.location.href = "in_uppic.asp"
</script>