here are my codes
---------------filePost.asp----------------------------
<%
'Adjust this depending on the size of the files you'll
'be expecting; longer timeout for larger files!
Server.ScriptTimeout = 5400
Const ForWriting = 2
Const TristateTrue = -1
CrLf = Chr(13) & Chr(10)
'This function retreives a field's name
Function GetFieldName(infoStr)
sPos = InStr(infoStr, "name="

EndPos = InStr(sPos + 6, infoStr, Chr(34) & ";"

If EndPos = 0 Then
EndPos = inStr(sPos + 6, infoStr, Chr(34))
End If
GetFieldName = Mid(infoStr, sPos + 6, endPos - _
(sPos + 6))
End Function
'This function retreives a file field's filename
Function GetFileName(infoStr)
sPos = InStr(infoStr, "filename="

EndPos = InStr(infoStr, Chr(34) & CrLf)
GetFileName = Mid(infoStr, sPos + 10, EndPos - _
(sPos + 10))
End Function
'This function retreives a file field's MIME type
Function GetFileType(infoStr)
sPos = InStr(infoStr, "Content-Type: "

GetFileType = Mid(infoStr, sPos + 14)
End Function
'Yank the file (and anything else) that was posted
PostData = ""
Dim biData
biData = Request.BinaryRead(Request.TotalBytes)
'Careful! It's binary! So, let's change it into
'something a bit more manageable.
For nIndex = 1 to LenB(biData)
PostData = PostData & Chr(AscB(MidB(biData,nIndex,1)))
Next
'Having used BinaryRead, the Request.Form collection is
'no longer available to us. So, we have to parse the
'request variables ourselves!
'First, let's find that encoding type!
ContentType = Request.ServerVariables( _
"HTTP_CONTENT_TYPE"

ctArray = Split(ContentType, ";"

'File posts only work well when the encoding is
'"multipart/form-data", so let's check for that!
If Trim(ctArray(0)) = "multipart/form-data" Then
ErrMsg = ""
' grab the form boundary...
bArray = Split(Trim(ctArray(1)), "="

Boundary = Trim(bArray(1))
'Now use that to split up all the variables!
FormData = Split(PostData, Boundary)
'Extract the information for each variable and its data
Dim myRequest, myRequestFiles(9, 3)
Set myRequest = CreateObject("Scripting.Dictionary"

FileCount = 0
For x = 0 to UBound(FormData)
'Two CrLfs mark the end of the information about
'this field; everything after that is the value
InfoEnd = InStr(FormData(x), CrLf & CrLf)
If InfoEnd > 0 Then
'Get info for this field, minus stuff at the end
varInfo = Mid(FormData(x), 3, InfoEnd - 3)
'Get value for this field, being sure to skip
'CrLf pairs at the start and the CrLf at the end
varValue = Mid(FormData(x), InfoEnd + 4, _
Len(FormData(x)) - InfoEnd - 7)
'Is this a file?
If (InStr(varInfo, "filename="

> 0) Then
'Place it into our files array
'(While this supports more than one file
'uploaded at a time we only consider the
'single file case in this example)
myRequestFiles(FileCount, 0) = GetFieldName( _
varInfo)
myRequestFiles(FileCount, 1) = varValue
myRequestFiles(FileCount, 2) = GetFileName( _
varInfo)
myRequestFiles(FileCount, 3) = GetFileType( _
varInfo)
FileCount = FileCount + 1
Else
'It's a regular field
myRequest.add GetFieldName(varInfo), varValue
End If
End If
Next
Else
ErrMsg = "Wrong encoding type!"
End If
'Save the actual posted file
'If supporting more than one file, turn this into a loop!
Dim strFilePath, strdisplayFilename
Set lf = server.createObject("Scripting.FileSystemObject"

If myRequest("filename"

= "original" Then
'Use the filename that came with the file
'At this point, you need to determine what sort of
'client sent the file. Macintoshes only send the file
'name, with no path information, while Windows clients
'send the entire path of the file that was selected
BrowserType = UCase(Request.ServerVariables( _
"HTTP_USER_AGENT"

)
If (InStr(BrowserType, "WIN"

> 0) Then
'It's Windows; yank the filename off the end!
sPos = InStrRev(myRequestFiles(0, 2), "\"

fName = Mid(myRequestFiles(0, 2), sPos + 1)
End If
If (InStr(BrowserType, "MAC"

> 0) Then
'It's a Mac. Simple.
'(Mac filenames can contain characters that are
'illegal under Windows, so look out for that!)
fName = myRequestFiles(0, 2)
End If
'If your upload path is different, set that here
strdisplayFilename = fName
session("variable"

= strDisplayFileName
strFilePath = "C:\Inetpub\
& fName
Else
'Use the user-specified filename instead
'If your upload path is different, set that here
strdisplayFilename = myRequest("userSpecifiedName"

session("variable"

= strDisplayFileName
strFilePath = "C:\Inetpub\
& myRequest("userSpecifiedName"

End If
Response.Write(strdisplayFilename)
'Response.Write(strFilePath)
'SavePath = Server.MapPath(strFilePath)
'Response.Write(SavePath)
Set SaveFile = lf.CreateTextFile(strFilePath, True)
SaveFile.Write(myRequestFiles(0, 1))
SaveFile.Close
'IIS may hang if you don't explicitly return SOMETHING.
'So, redirect to another page or provide some kind of
'feedback below...
%>
<html>
<body>
<% If ErrMsg = "" Then %>
File was successfully transmitted.
<% Else %>
<%= ErrMsg %>
<% End If %>
</html>
-------------------end filePost.asp---------------------
----------------event_update.asp------------------------
<%option explicit%>
<!--#include virtual="/include/adovbs.inc"-->
<!--#include file="../include/Admin_Const.inc"-->
<!--#include file="../include/Function_ChangeQuotes.inc"-->
<% if session("aduser"

= "" or session("adpwd"

= "" then response.redirect("../index.asp?error=2"

end if
Dim strSQL, strDSN, objDBConn, sHide, objRS, urlencode, strTime, GETdate, strLogo_file, intLogo_vsize, intLogo_hsize
Dim strItem, strTitle, strBrief_desc, strLocation, intStatus, StrSpeakers, strEvent_type, strOrganizing_committee, strPrice_comments, strSponsor
Dim intNonmember_price, intMember_price, dteEvent_date, dteRevision_Date, dteUpload_Date, strDescription, intItem
If Request("Upload"

= "Upload Logo" Then
strDSN = Live_DSN
Set OBJdbConn = Server.CreateObject("ADODB.Connection"

OBJdbConn.Open strDSN
strSQL = "Update Event set Upload_Date = GETDate() where Item = " & session("sItem"

OBJdbconn.execute(strSQL)
OBJdbconn.close
SET OBJdbConn = nothing
'session("fullpathy"

= "d:\inetpub\
& request("Logo_file"
response.redirect("events_upload.asp"

end if
sHide = request("Hidden"
If Request("Delete"

= "Delete Event" Then
strDSN = Live_DSN
Set OBJdbConn = Server.CreateObject("ADODB.Connection"

OBJdbConn.Open strDSN
strSQL = "Update Event set status=2 where Item = " & session("sItem"

OBJdbconn.execute(strSQL)
OBJdbconn.close
SET OBJdbConn = nothing
response.redirect("events_edit.asp?Item=" & session("sItem"

& "&update=2&hidden=" &sHide)
end if
intItem = request("item"

strTitle = trim(ChangeQuotes(request("Title"

))
response.write "Title:" & request("Title"
strBrief_desc = trim(ChangeQuotes(request("Brief_desc"

))
dteEvent_date = request("Event_date"

'response.write "Eventdate:" & request("Event_date"
strTime = request("Time"

strLocation = trim(ChangeQuotes(request("Location"

))
intStatus = request("Status"

strSpeakers = trim(ChangeQuotes(request("Speakers"

))
strSponsor = trim(ChangeQuotes(request("Sponsor"

))
strPrice_comments = trim(ChangeQuotes(request("Price_comments"

))
strOrganizing_committee = request("Organizing_committee"

strEvent_type = request("Event_type"
strLogo_file = session("variable"

Session.Abandon()
response.write(strLogo_file )
'strLogo_file = request("Logo_file"

intLogo_vsize = request("Logo_vsize"

response.write "V-size:" & request("Logo_vsize"
intLogo_hsize = request("Logo_hsize"

intMember_price = request("Member_price"

intNonmember_price = request("Nonmember_price"

dteUpload_Date = request("Upload_Date"

dteRevision_Date = request("Revision_Date"

strDescription = trim(ChangeQuotes(request("Description"

))
strDSN = Live_DSN
Set OBJdbConn = Server.CreateObject("ADODB.Connection"

OBJdbConn.Open strDSN
strSQL = "Update Event "
strSQL = strSQL & "Set Title='" & strTitle & "', "
strSQL = strSQL & " Brief_desc='" & strBrief_desc & "', "
strSQL = strSQL & " Event_date= convert(datetime, '" & FormatDateTime(dteEvent_Date, 2) & "',101),"
'response.write(strSQL)
strSQL = strSQL & " Location='" & strLocation & "', "
strSQL = strSQL & " Status='" & intStatus & "', "
strSQL = strSQL & " Speakers='" & strSpeakers & "', "
strSQL = strSQL & " Sponsor='" & strSponsor & "', "
strSQL = strSQL & " Price_comments ='" & strPrice_comments & "', "
strSQL = strSQL & " Organizing_committee='" & strOrganizing_committee & "', "
strSQL = strSQL & " Event_type ='" & strEvent_type & "', "
strSQL = strSQL & " Logo_file ='" & strLogo_file & "', "
strSQL = strSQL & " Logo_vsize='" & intLogo_vsize & "', "
strSQL = strSQL & " Logo_hsize='" & intLogo_hsize & "', "
strSQL = strSQL & " Member_price='" & intMember_price & "', "
strSQL = strSQL & " Nonmember_price ='" & intNonmember_price & "', "
strSQL = strSQL & " Description='" & strDescription & "', "
strSQL = strSQL & " Time='" & strTime & "', "
strSQL = strSQL & " Revision_Date= GETDate() "
strSQL = strSQL & " where Item = " & session("sItem"

'Response.Write(strsql)
OBJdbconn.execute(strSQL)
OBJdbconn.close
SET OBJdbConn = nothing
response.redirect("events_edit.asp?Item=" & intItem & "&update=1&hidden=" &sHide)
%>
----------------end event_update.asp---------------------