FileUpload Class (System.Web.UI.WebControls)

Switch on low bandwidth view

Collapse All

Language Filter

This page is specific to

Microsoft Visual Studio 2005/.NET Framework 2.0

Other versions are also available for the following:

.NET Framework Class Library

FileUpload Class

Note: This class is new in the .NET Framework version 2.0.

Displays a text box control and a browse button that allow users to select a file to upload to the server.

Namespace: System.Web.UI.WebControls
Assembly: System.Web (in system.web.dll)

Syntax

Visual Basic (Declaration)

<ControlValuePropertyAttribute("FileBytes")> _
<ValidationPropertyAttribute("FileName")> _
Public Class FileUpload
    Inherits WebControl

Visual Basic (Usage)

Dim instance As FileUpload

[ControlValuePropertyAttribute("FileBytes")] 
[ValidationPropertyAttribute("FileName")] 
public class FileUpload : WebControl

C++

[ControlValuePropertyAttribute(L"FileBytes")] 
[ValidationPropertyAttribute(L"FileName")] 
public ref class FileUpload : public WebControl

/** @attribute ControlValuePropertyAttribute("FileBytes") */ 
/** @attribute ValidationPropertyAttribute("FileName") */ 
public class FileUpload extends WebControl

JScript

ControlValuePropertyAttribute("FileBytes") 
ValidationPropertyAttribute("FileName") 
public class FileUpload extends WebControl

Remarks

The FileUpload class displays a text box control and a browse button that allow users to select a file on the client and upload it to the Web server. The user specifies the file to upload by entering the full path to the file on the local computer (for example, C:\MyFiles\TestFile.txt) in the text box of the control. Alternately, the user can select the file by clicking the Browse button, and then locating it in the Choose File dialog box.

The FileUpload control does not automatically save a file to the server after the user selects the file to upload. You must explicitly provide a control or mechanism to allow the user to submit the specified file. For example, you can provide a button that the user clicks to upload the file. The code that you write to save the specified file should call the SaveAs method, which saves the contents of a file to a specified path on the server. Typically, the SaveAs method is called in an event-handling method for an event that raises a post back to the server. For example, if you provide a button to submit a file, you could place the code to save the file inside the event-handling method for the click event.

Before calling the SaveAs method to save the file to the server, use the HasFile property to verify that the FileUpload control contains a file. If the HasFile returns true, call the SaveAs method. If it returns false, display a message to the user indicating that the control does not contain a file. Do not check the PostedFile property to determine whether a file to upload exists, because this property contains 0 bytes by default. As a result, even when the FileUpload control is blank, the PostedFile property returns a non-null value.

When you call the SaveAs method, you must specify the full path to the directory in which to save the uploaded file. If you do not explicitly specify a path in your application code, an exception is thrown when a user attempts to upload a file. This behavior helps to keep the files on the server secure by preventing users from being able to write to arbitrary locations in your application's directory structure, as well as preventing access to sensitive root directories.

The SaveAs method writes the uploaded file to the specified directory. Therefore, the ASP.NET application must have write access to the directory on the server. There are two ways that the application can get write access. You can explicitly grant write access to the account under which the application is running, in the directory in which the uploaded files will be saved. Alternatively, you can increase the level of trust that is granted to the ASP.NET application. To get write access to the executing directory for the application, the application must be granted the AspNetHostingPermission object with the trust level set to the AspNetHostingPermissionLevel.Medium value. Increasing the level of trust increases the application's access to resources on the server. Note that this is not a secure approach, because a malicious user who gains control of your application will also be able to run under this higher level of trust. It is a best practice to run an ASP.NET application in the context of a user with the minimum privileges that are required for the application to run. For more information on security in ASP.NET applications, see Basic Security Practices for Web Applications and ASP.NET Trust Levels and Policy Files.

Use the FileName property to get the name of a file on a client to upload using the FileUpload control. The file name that this property returns does not include the path to the file on the client.

The FileContent property gets a Stream object that points to a file to upload. Use this property to access the contents of the file as bytes. For example, you can use the Stream object that is returned by the FileContent property to read the contents of the file as bytes and store them in a byte array. Alternatively, you can use the FileBytes property to retrieve all the bytes in the file.

The PostedFile property gets the underlying HttpPostedFile object for the file to upload. You can use this property to access additional properties on the file. The ContentLength property gets the length of the file. The ContentType property gets the MIME content type of the file. In addition, you can use the PostedFile property to access the FileName property, the InputStream property, and the SaveAs method. However, the same functionality is provided by the FileName property, the FileContent property, and the SaveAs method.

One way to guard against denial of service attacks is to limit the size of the files that can be uploaded using the FileUpload control. You should set a size limit that is appropriate for the types of files that you expect to be uploaded. The default size limit is 4096 KB (4 MB). You can allow larger files to be uploaded by setting the maxRequestLength attribute of the httpRuntime element. To increase the maximum allowable file size for the entire application, set the maxRequestLength attribute in the Web.config file. To increase the maximum allowable file size for a specified page, set the maxRequestLength attribute inside the location element in Web.config. For an example, see location Element (ASP.NET Settings Schema).

When uploading large files, a user might also receive the following error message:

aspnet_wp.exe (PID: 1520) was recycled because memory consumption exceeded 460 MB (60 percent of available RAM).

If your users encounter this error message, increase the value of the memoryLimit attribute in the processModel element of the Web.config file for the application. The memoryLimit attribute specifies the maximum amount of memory that a worker process can use. If the worker process exceeds the memoryLimit amount, a new process is created to replace it, and all current requests are reassigned to the new process.

To control whether the file to upload is temporarily stored in memory or on the server while the request is being processed, set the requestLengthDiskThreshold attribute of the httpRuntime element. This attribute allows you to manage the size of the input stream buffer. The default is 256 bytes. The value that you specify should not exceed the value that you specify for the maxRequestLength attribute.

Topic	Location
How to: Set Focus on ASP.NET Web Server Controls	Building ASP .NET Web Applications
How to: Set Focus on ASP.NET Web Server Controls	Building ASP .NET Web Applications
How to: Set Focus on ASP.NET Web Server Controls	Building ASP .NET Web Applications in Visual Studio
How to: Set Focus on ASP.NET Web Server Controls	Building ASP .NET Web Applications in Visual Studio
How to: Upload Files with the FileUpload Web Server Control	Building ASP .NET Web Applications
How to: Upload Files with the FileUpload Web Server Control	Building ASP .NET Web Applications
How to: Upload Files with the FileUpload Web Server Control	Building ASP .NET Web Applications in Visual Studio
How to: Upload Files with the FileUpload Web Server Control	Building ASP .NET Web Applications in Visual Studio

Example

This section contains four code examples:

The first code example demonstrates how to create a FileUpload control that saves files to a path that is specified in code.
The second code example demonstrates how to create a FileUpload control that saves files to a specified directory in the file system for the application.
The third code example demonstrates how to create a FileUpload control that saves files to a specified path and limits the size of the file that can be uploaded.
The fourth code example demonstrates how to create a FileUpload control that saves files to a specified path and allows only files with the .doc or .xls extensions to be uploaded.

Caution
These code examples demonstrate the basic syntax for the FileUpload control, but do not demonstrate all the necessary error checking that should be completed prior to saving the file. For a more complete example, see SaveAs.

The following code example demonstrates how to create a FileUpload control that saves files to a path that is specified in code. The SaveAs method is called to save the file to the specified path on the server.

Visual Basic

<%@ Page Language="VB" %>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> 

<script runat="server">
        
  Sub UploadButton_Click(ByVal sender As Object, ByVal e As System.EventArgs)
            
    ' Specify the path on the server to
    ' save the uploaded file to.
    Dim savePath As String = "c:\temp\uploads\"
            
    ' Before attempting to perform operations
    ' on the file, verify that the FileUpload 
    ' control contains a file.
    If (FileUpload1.HasFile) Then
      ' Get the name of the file to upload.
      Dim fileName As String = FileUpload1.FileName
                      
      ' Append the name of the file to upload to the path.
      savePath += fileName
                
      ' Call the SaveAs method to save the 
      ' uploaded file to the specified path.
      ' This example does not perform all
      ' the necessary error checking.               
      ' If a file with the same name
      ' already exists in the specified path,  
      ' the uploaded file overwrites it.
      FileUpload1.SaveAs(savePath)
                
      ' Notify the user of the name the file
      ' was saved under.
      UploadStatusLabel.Text = "Your file was saved as " & fileName
                
    Else
      ' Notify the user that a file was not uploaded.
      UploadStatusLabel.Text = "You did not specify a file to upload."
    End If

  End Sub
       
</script>

<html  >
<head runat="server">
    <title>FileUpload Example</title>
</head>
<body>
    <form id="form1" runat="server">
    <div>
       <h4>Select a file to upload:</h4>
   
       <asp:FileUpload id="FileUpload1"                 
           runat="server">
       </asp:FileUpload>
            
       <br /><br />
       
       <asp:Button id="UploadButton" 
           Text="Upload file"
           OnClick="UploadButton_Click"
           runat="server">
       </asp:Button>    
       
       <hr />
       
       <asp:Label id="UploadStatusLabel"
           runat="server">
       </asp:Label>        
    </div>
    </form>
</body>
</html>

<%@ Page Language="C#" %>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> 

<script runat="server">

  protected void UploadButton_Click(object sender, EventArgs e)
  {
    // Specify the path on the server to
    // save the uploaded file to.
    String savePath = @"c:\temp\uploads\";
 
    // Before attempting to perform operations
    // on the file, verify that the FileUpload 
    // control contains a file.
    if (FileUpload1.HasFile)
    {
      // Get the name of the file to upload.
      String fileName = FileUpload1.FileName;
      
      // Append the name of the file to upload to the path.
      savePath += fileName;
      

      // Call the SaveAs method to save the 
      // uploaded file to the specified path.
      // This example does not perform all
      // the necessary error checking.               
      // If a file with the same name
      // already exists in the specified path,  
      // the uploaded file overwrites it.
      FileUpload1.SaveAs(savePath);
      
      // Notify the user of the name of the file
      // was saved under.
      UploadStatusLabel.Text = "Your file was saved as " + fileName;
    }
    else
    {      
      // Notify the user that a file was not uploaded.
      UploadStatusLabel.Text = "You did not specify a file to upload.";
    }

  }
</script>

<html  >
<head runat="server">
    <title>FileUpload Example</title>
</head>
<body>
    <form id="form1" runat="server">
    <div>
       <h4>Select a file to upload:</h4>
   
       <asp:FileUpload id="FileUpload1"                 
           runat="server">
       </asp:FileUpload>
            
       <br /><br />
       
       <asp:Button id="UploadButton" 
           Text="Upload file"
           OnClick="UploadButton_Click"
           runat="server">
       </asp:Button>    
       
       <hr />
       
       <asp:Label id="UploadStatusLabel"
           runat="server">
       </asp:Label>        
    </div>
    </form>
</body>
</html>

The following code example demonstrates how to create a FileUpload control that saves files to a specified directory in the file system for the application. The HttpRequest.PhysicalApplicationPath property is used to get the physical file system path of the root directory for the currently executing server application. The SaveAs method is called to save the file to the specified path on the server.

Visual Basic

<%@ Page Language="VB" %>

<html>
<head>

    <script runat="server">
        Sub UploadButton_Click(ByVal sender As Object, ByVal e As System.EventArgs)
            
            ' Save the uploaded file to an "Uploads" directory
            ' that already exists in the file system of the 
            ' currently executing ASP.NET application.  
            ' Creating an "Uploads" directory isolates uploaded 
            ' files in a separate directory. This helps prevent
            ' users from overwriting existing application files by
            ' uploading files with names like "Web.config".
            Dim saveDir As String = "\Uploads\"
           
            ' Get the physical file system path for the currently
            ' executing application.
            Dim appPath As String = Request.PhysicalApplicationPath
            
            ' Before attempting to save the file, verify
            ' that the FileUpload control contains a file.
            If (FileUpload1.HasFile) Then
                Dim savePath As String = appPath + saveDir + FileUpload1.FileName
                        
                ' Call the SaveAs method to save the 
                ' uploaded file to the specified path.
                ' This example does not perform all
                ' the necessary error checking.               
                ' If a file with the same name
                ' already exists in the specified path,  
                ' the uploaded file overwrites it.
                FileUpload1.SaveAs(savePath)
                
                ' Notify the user that the file was uploaded successfully.
                UploadStatusLabel.Text = "Your file was uploaded successfully."

            Else
                ' Notify the user that a file was not uploaded.
                UploadStatusLabel.Text = "You did not specify a file to upload."
            End If

        End Sub
       
    </script>

</head>
<body>

   <h3>FileUpload Class Example: Save To Application Directory</h3>

   <form ID="Form1" runat="server">
   
       <h4>Select a file to upload:</h4>
   
       <asp:FileUpload id="FileUpload1"                 
           runat="server">
       </asp:FileUpload>
            
       <br><br>
       
       <asp:Button id="UploadButton" 
           Text="Upload file"
           OnClick="UploadButton_Click"
           runat="server">
       </asp:Button>    
       
       <hr />
       
       <asp:Label id="UploadStatusLabel"
           runat="server">
       </asp:Label>       
         
   </form>

</body>
</html>

The following code example demonstrates how to create a FileUpload control that saves files to a path that is specified in the code. The control limits the size of the file that can be uploaded to 5 MB. The PostedFile property is used to access the underlying ContentLength property and return the size of the file. If the size of the file to upload is less than 5 MB, the SaveAs method is called to save the file to the specified path on the server. In addition to checking for the maximum file size setting in your application code, you can set the maxRequestLength attribute of the httpRuntime element to a maximum allowable size in the configuration file for your application.

Visual Basic

<%@ Page Language="VB" %>

<html>
<head>

    <script runat="server">
        
        Sub UploadButton_Click(ByVal sender As Object, ByVal e As System.EventArgs)
            
            ' Specify the path on the server to
            ' save the uploaded file to.
            Dim savePath As String = "c:\temp\uploads\"
                       
            ' Before attempting to save the file, verify
            ' that the FileUpload control contains a file.
            If (FileUpload1.HasFile) Then
                
                ' Get the size in bytes of the file to upload.
                Dim fileSize As Integer = FileUpload1.PostedFile.ContentLength
          
                ' Allow only files less than 5,100,000 bytes (approximately 5 MB) to be uploaded.
                If (fileSize < 5100000) Then
                        
                    ' Append the name of the uploaded file to the path.
                    savePath += FileUpload1.FileName

                    ' Call the SaveAs method to save the 
                    ' uploaded file to the specified path.
                    ' This example does not perform all
                    ' the necessary error checking.               
                    ' If a file with the same name
                    ' already exists in the specified path,  
                    ' the uploaded file overwrites it.
                    FileUpload1.SaveAs(savePath)
                
                    ' Notify the user that the file was uploaded successfully.
                    UploadStatusLabel.Text = "Your file was uploaded successfully."
            
                Else
                    ' Notify the user why their file was not uploaded.
                    UploadStatusLabel.Text = "Your file was not uploaded because " + _
                                             "it exceeds the 5 MB size limit."
                End If
                
            Else
                ' Notify the user that a file was not uploaded.
                UploadStatusLabel.Text = "You did not specify a file to upload."
            End If

        End Sub
       
    </script>

</head>
<body>

   <h3>FileUpload Class Example: Check File Size</h3>

   <form ID="Form1" runat="server">
   
       <h4>Select a file to upload:</h4>
   
       <asp:FileUpload id="FileUpload1"                 
           runat="server">
       </asp:FileUpload>
            
       <br><br>
       
       <asp:Button id="UploadButton" 
           Text="Upload file"
           OnClick="UploadButton_Click"
           runat="server">
       </asp:Button>
       
       <hr />
       
       <asp:Label id="UploadStatusLabel"
           runat="server">
       </asp:Label>
                      
   </form>

</body>
</html>

The following code example demonstrates how to create a FileUpload control that saves files to a path that is specified in the code. This example allows only files with the .doc or .xls extensions to be uploaded. The Path.GetExtension method is called to return the extension of the file to upload. If the file has a .doc or .xls extension, the SaveAs method is called to save the file to the specified path on the server.

Visual Basic

<%@ Page Language="VB" %>

<html>
<head>

    <script runat="server">
        Sub UploadBtn_Click(ByVal sender As Object, ByVal e As System.EventArgs)
            
            ' Specify the path on the server to
            ' save the uploaded file to.
            Dim savePath As String = "c:\temp\uploads\"
            
            ' Before attempting to save the file, verify
            ' that the FileUpload control contains a file.
            If (FileUpload1.HasFile) Then
            
                ' Get the name of the file to upload.
                Dim fileName As String = FileUpload1.FileName
            
                ' Get the extension of the uploaded file.
                Dim extension As String = System.IO.Path.GetExtension(fileName)
            
                ' Allow only files with .doc or .xls extensions
                ' to be uploaded.
                If (extension = ".doc") Or (extension = ".xls") Then
                        
                    ' Append the name of the file to upload to the path.
                    savePath += fileName
            
                    ' Call the SaveAs method to save the 
                    ' uploaded file to the specified path.
                    ' This example does not perform all
                    ' the necessary error checking.               
                    ' If a file with the same name
                    ' already exists in the specified path,  
                    ' the uploaded file overwrites it.
                    FileUpload1.SaveAs(savePath)
                
                    ' Notify the user that their file was successfully uploaded.
                    UploadStatusLabel.Text = "Your file was uploaded successfully."
            
                Else
                    ' Notify the user why their file was not uploaded.
                    UploadStatusLabel.Text = "Your file was not uploaded because " + _
                                             "it does not have a .doc or .xls extension."
                End If
                
            Else
                ' Notify the user that a file was not uploaded.
                UploadStatusLabel.Text = "You did not specify a file to upload."
            End If

        End Sub
       
    </script>

</head>
<body>
    <h3>FileUpload Class Example: Check File Extension</h3>

    <form ID="Form1" runat="server">
   
        <h4>Select a file to upload:</h4>
       
        <asp:FileUpload id="FileUpload1"                 
            runat="server">
        </asp:FileUpload>
            
        <br><br>
       
        <asp:Button id="UploadBtn" 
            Text="Upload file"
            OnClick="UploadBtn_Click"
            runat="server">
        </asp:Button>    
       
        <hr />
       
        <asp:Label id="UploadStatusLabel"
            runat="server">
        </asp:Label>             
         
    </form>

</body>
</html>

.NET Framework Security

AspNetHostingPermission to run the FileUpload control in a hosted environment. Associated enumeration: AspNetHostingPermissionLevel.Minimal
AspNetHostingPermission to allow write access to directories under the currently executing application. Associated enumeration: AspNetHostingPermissionLevel.Medium

Inheritance Hierarchy

System.Object
   System.Web.UI.Control
     System.Web.UI.WebControls.WebControl
      System.Web.UI.WebControls.FileUpload

Thread Safety

Any public static (Shared in Visual Basic) members of this type are thread safe. Any instance members are not guaranteed to be thread safe.

Platforms

Windows 98, Windows 2000 SP4, Windows Server 2003, Windows XP Media Center Edition, Windows XP Professional x64 Edition, Windows XP SP2, Windows XP Starter Edition

The .NET Framework does not support all versions of every platform. For a list of the supported versions, see System Requirements.

Version Information

.NET Framework

Supported in: 2.0

Reference

FileUpload Members
System.Web.UI.WebControls Namespace
SaveAs

Upload Images to MS Access

You can use the ASP.NET FileUpload control to insert images in an Access database.

1. Create an Access database called imagedb.mdb using the schema (field name:type) shown below.

id: AutoNumber
FileName:Text
FileSize: Number (long integer)
ContentType: Text
FileData: OLE Object

2. Put the database in the site's App_Data folder.

3. Add a file called upload.aspx to handle the upload and to display the images. Use the following code for upload.aspx:

<%@ page language="VB" %>

<script runat="server">

    Protected Sub btnDisplay_Click _
    (ByVal sender As Object, ByVal e As System.EventArgs)

        Dim strConnection As String
        strConnection = "Provider=Microsoft.Jet.OLEDB.4.0;" & _
          "Data Source=" _
         & Server.MapPath("App_Data/imagedb.mdb")
        Dim con As New Data.OleDb.OleDbConnection(strConnection)
        Dim cmdtext As String = "SELECT ID, FileName," _
          & " FileSize, ContentType FROM Files"
        Dim cmd As New Data.OleDb.OleDbCommand(cmdtext, con)
        Dim ds As New Data.DataSet
        Dim da As New Data.OleDb.OleDbDataAdapter _
          (cmdtext, strConnection)
        da.Fill(ds)
        dg2.DataSource = ds
        dg2.DataBind()
    End Sub


    Protected Sub btnUpload_Click _
    (ByVal sender As Object, ByVal e As System.EventArgs)
        ' Puts uploaded file in Access database
        ' Adapted for VB by Ken Cox [MVP] from
        ' File Uploading to Access Database using ASP.NET
        ' by Faisal Khan.
        ' http://www.stardeveloper.com/articles/display.html
        '?article=2003031201&page=1
        Dim strConnection As String
        strConnection = "Provider=Microsoft.Jet.OLEDB.4.0;" & _
          "Data Source=" _
         & Server.MapPath("App_Data/imagedb.mdb")
        If Request.Files.Count > 0 Then
            Dim files As HttpFileCollection
            Dim afile As HttpPostedFile
            files = Request.Files
            afile = files(0)
            Dim contentType As String = afile.ContentType
            Dim filename As String = ""
            Dim filelength As Integer = afile.ContentLength
            Dim fileData As Byte() = New Byte(filelength) {}
            Dim lastpos As Integer
            lastpos = afile.FileName.LastIndexOf("\")
            filename = afile.FileName.Substring(lastpos + 1)
            afile.InputStream.Read(fileData, 0, filelength)
            Dim con As New Data.OleDb.OleDbConnection(strConnection)
            Dim cmdtext As String = "INSERT INTO Files(FileName," & _
             " FileSize, ContentType, FileData) VALUES " & _
             " (@FileName, @FileSize, @ContentType, @FileData)"
            Dim cmd As New Data.OleDb.OleDbCommand(cmdtext, con)
            Dim pms As Data.OleDb.OleDbParameterCollection
            pms = cmd.Parameters
            pms.Add("@FileName", Data.OleDb.OleDbType.VarChar, 50)
            pms.Add("@FileSize", Data.OleDb.OleDbType.Integer)
            pms.Add("@ContentType", Data.OleDb.OleDbType.VarChar, 50)
            pms.Add("@FileData", Data.OleDb.OleDbType.VarBinary)

            pms("@FileName").Value = filename
            pms("@FileSize").Value = filelength
            pms("@ContentType").Value = contentType
            pms("@FileData").Value = fileData

            con.Open()
            cmd.ExecuteNonQuery()
            con.Close()
        End If
    End Sub
</script>

<html>

<body>
    <form id="Form1" runat="server" >
     
        <asp:fileupload id="thefile" runat="server" /><br>
        <br />  <br />
        <asp:button id="btnUpload" runat="server" text="Upload" onclick="btnUpload_Click" />&nbsp;<br />
        <br />
        <asp:button id="btnDisplay" runat="server" onclick="btnDisplay_Click" text="View Images" />&nbsp;<br />
        <br />
        <asp:datagrid id="dg2" runat="server" autogeneratecolumns="False">
            <columns>
                <asp:boundcolumn datafield="filename" headertext="Filename" readonly="True"></asp:boundcolumn>
                <asp:boundcolumn datafield="Filesize" headertext="Filesize" readonly="True"></asp:boundcolumn>
                <asp:boundcolumn datafield="contenttype" headertext="Contenttype" readonly="True"></asp:boundcolumn>
                <asp:templatecolumn headertext="Image">
                    <itemtemplate>
                        <asp:image runat="server" imageurl='<%# "imagefetch.aspx?id=" & DataBinder.Eval(Container, "DataItem.id") %>' />
                    </itemtemplate>
                </asp:templatecolumn>
            </columns>
        </asp:datagrid>
        <br />
    </form>
</body>
</html>

4. See the next item for a file Imagefetch.aspx to fetch the image to display in the grid.

5. Browse to upload.aspx and upload a JPG image. Click View Images to see the contents of the database displayed in the datagrid.

Upload Images to MS Access (Part Two)

This shows how to get the uploaded images to display in the datagrid. The grid calls on a helper page to fetch the image content.

1. Create a file called imagefetch.aspx and use the following as the complete code. There is no HTML markup in this page.

<%@ Page Language="VB" %>
<script runat="server">
    Protected Sub Page_Load _
    (ByVal sender As Object, ByVal e As System.EventArgs)
        ' Gets the image from the Access
        ' Database for inclusion in another page
        ' Adapted from an MS KB article by Ken Cox [MVP]
        ' 
        Dim recno As Integer
        If Request("id") = "" Then
            Exit Sub
        End If
        recno = Request("id")
        Dim strConnection As String
        strConnection = "Provider=Microsoft.Jet.OLEDB.4.0;" & _
          "Data Source=" _
         & Server.MapPath("App_Data/imagedb.mdb")
        Dim con As New Data.OleDb.OleDbConnection _
         (strConnection)
        Dim da As New Data.OleDb.OleDbDataAdapter _
        ("Select filedata From files where id=" & _
          recno.ToString, con)
        Dim MyCB As New Data.OleDb.OleDbCommandBuilder(da)
        Dim ds As New Data.DataSet()
        con.Open()
        da.Fill(ds, "images")
        Dim myRow As Data.DataRow
        myRow = ds.Tables("images").Rows(0)
        Dim MyData() As Byte
        MyData = myRow("filedata")
        Response.Buffer = True
        Response.ContentType = "Image/JPEG"
        Response.BinaryWrite(MyData)
        MyCB = Nothing
        ds = Nothing
        da = Nothing
        con.Close()
        con = Nothing
    End Sub
</script>

2. Run upload.aspx as described in the first part of this article. The datagrid passes a parameter to imagefetch.aspx to display the corresponding image.

Note: To keep the code short, I haven't included any validation and error handling. Don't use my code samples as examples of best practices for security and error checking.