帮我看看此段代码哪里错了

spupok.asp 上传代码  我不知道怎么搞了 老显示500  错误

代码是

<!--#include file="upconn.asp"-->
<!--#include file="usercookies.asp"-->
<%Server.ScriptTimeOut=5000%>
<!--#include file="config.asp"-->
<!--#include file = "foxx.inc"-->
<%
if instr(request.servervariables("http_referer"),"http://"&request.servervariables("host") )<1 then
response.write "处理 URL 时服务器上出错。<br>非法攻击服务器，你的所有操作及ID已经被服务器记录。<br>我们会第一时间通知公安局网监来调查你的IP。 "
response.end
end if

dim upload,file,formElement,formFile,iCount,fileExt,xxid,username,huitype,formPath,rs,sql,filename
iCount=0

set upload = new sjCat_Upload
Set file = upload.file("file1")
username=upload.form("username")
 xxid=upload.form("xxid")
 huitype=upload.form("huitype")
 if file.filesize<1 then
  response.write "<font size=2>请先选择你要上传的图片　[ <a href=# onclick=history.go(-1)>重新上传</a> ]</font>"
 response.end
 end if
 fileExt=lcase(right(file.filename,4))
 if fileEXT<>".gif" and fileEXT<>".jpg" and fileEXT<>".bmp" then
  response.write "<font size=2>文件格式不对　[ <a href=# onclick=history.go(-1)>重新上传</a> ]</font>"
 response.end
 end if
 if file.filesize>1024000 then '这是1000K的图片大小数据
  response.write "<font size=2>图片大小超过了限制(不大于100K)　[ <a href=# onclick=history.go(-1)>重新上传</a> ]</font>"
 response.end
 end if
 filename=formPath&year(now)&month(now)&day(now)&hour(now)&minute(now)&second(now)&fileExt
if file.FileSize>0 then
    file.Save2File Server.mappath("shopupfiles") & "\" & FileName 
 iCount=iCount+1
end if
set file=nothing
set upload=nothing
 if xxid="" then
 Response.Write"<li>您操作参数错误！"
 response.end
 end if
  if username="" then
 Response.Write"<li>您操作参数错误！"
 response.end
 end if

 
set rs=server.createobject("adodb.recordset")
sql = "select xinxipic,xxid,username from FOX_shop where username='"&username&"' and xxid='"&xxid&"'"
rs.open sql,conn,1,3
if session("addxinxi")<>"" then
  if DateDiff("s",session("addxinxi"),Now())<180 then
  response.write "<script>alert('系统保护：你提交数据太快，系统中止运行，请等待180秒钟！！');history.go(-1);</SCRIPT>"
  response.end
  end if
  end if
if not rs.eof or not rs.bof then
  if trim(rs("xxid"))=xxid then
 Response.Write"<li>您操作参数错误！"
 response.end
 end if
 else
rs.addnew
rs("username")=username
rs("xxid")=xxid
rs("xinxipic")=filename
rs.update
end if
rs.close
set rs=nothing
if huitype=1 then
set rs=server.createobject("adodb.recordset")
sql = "select dxb from FOX_user where username='"&username&"'"
rs.open sql,conn,1,3
rs("dxb")=rs("dxb")-tdxb
rs.update
rs.close
set rs=nothing
end if
closedb
response.write "图片成功上传！"
response.write "<a target='_blank' href='shopupfiles/"&FileName&"'>查看</a>"
%>