我有一个用户系统注册时要上传照片
<input name="PhotoDir" type="text" size="50" maxlength="100" value="<%=rsuser("PhotoDir")%>">
<input name="upbtn" type="button" id="upbtn" onClick="window.open('uploadpic1.asp?formname=form&editname=PhotoDir&uppath=uploadfiles&filelx=jpg,jpeg,gif,png','','status=no,scrollbars=no,top=20,left=110,width=420,height=465')" value="上传照片">

其中uploadpic1.asp代码为：
<%
uppath=request("uppath")&"/" '文件上传路径
filelx=request("filelx") '文件上传类型
formName=request("formName") '回传到上页面编辑框所在Form的Name
EditName=request("EditName") '回传到上页面编辑框的Name
%>
<form name="form1" method="post" action="upfilepic1.asp" enctype="multipart/form-data" >
<div id="esave" style="position:absolute; top:18px; left:40px; z-index:10; visibility:hidden">
<TABLE WIDTH=340 BORDER=0 CELLSPACING=0 CELLPADDING=0>
<TR><td width=20%></td>
<TD bgcolor=#003366 width="60%">
<TABLE WIDTH=100% height=100 BORDER=0 CELLSPACING=1 CELLPADDING=0>
<TR>
<td bgcolor=#ffffff align=center><font color=#003366>正在上传文件，请稍候...</font></td>
</tr>
</table>
</td><td width=20%></td>
</tr></table></div>
<table class="tableBorder" width="90%" border="0" align="center" cellpadding="3" cellspacing="1" bgcolor="#FFFFFF">
<tr>
<td align="center" bgcolor="#003366"><b><font color="#ffffff">文件上传
<input type="hidden" name="filepath" value="<%=uppath%>">
<input type="hidden" name="filelx" value="<%=filelx%>">
<input type="hidden" name="EditName" value="<%=EditName%>">
<input type="hidden" name="FormName" value="<%=formName%>">
<input type="hidden" name="act" value="uploadfile">
</font></b> </td>
</tr>
<tr bgcolor="#E8F1FF">
<td align="center" id="upid" height="80">选择文件:
<input type="file" name="file1" size="40" class="tx1" value="">
<input type="submit" name="Submit" value="开始上传" class="button" onClick="javascript:mysub()">
</td>
</tr>
</table>
</form>


upfilepic1.asp代码
<!--#include file="upload.inc"-->
<%
set upload=new upload_file
if upload.form("act")="uploadfile" then
filepath=trim(upload.form("filepath"))
filelx=trim(upload.form("filelx"))

i=0
for each formName in upload.File
set file=upload.File(formName)

fileExt=lcase(file.FileExt) '得到的文件扩展名不含有.

randomize
ranNum=int(90000*rnd)+10000
filename=filepath&year(now)&month(now)&day(now)&hour(now)&minute(now)&second(now)&ranNum&"."&fileExt

if file.filesize<100 then
response.write "<script language=javascript>alert('请先选择你要上传的文件！');history.go(-1);</script>"
response.end
end if
if (fileExt<>"jpg") and (fileExt<>"jpeg") and (fileExt<>"gif") and (fileExt<>"png") then
response.write "<script language=javascript>alert('该文件类型不能上传！');history.go(-1);</script>"
response.end
end if

if file.FileSize>0 then ''如果 FileSize > 0 说明有文件数据
file.SaveToFile Server.mappath(FileName)
response.write "<script>window.opener.document."&upload.form("FormName")&"."&upload.form("EditName")&".value='/blog/"&FileName&"'</script>"
end if
set file=nothing
next
set upload=nothing

end if
%>
<script language="javascript">
window.alert("文件上传成功!");
window.close();
</script>

注:图片经确实已上传成功,那怎么把已上传成功的图片路径写入<input name="PhotoDir" type="text" size="50" maxlength="100" value="<%=rsuser("PhotoDir")%>">input框里呢?