managerpurchase.java

用jsp实现的大型商城源代码

				HtmlStr += "<tr align=center valign=middle> ";
                HtmlStr += "	<td>" + i + "</td>";
                HtmlStr += "	<td>" + PName + "</td>";
                HtmlStr += "	<td>" + rs1.getString("date_time") + "</td>";
                HtmlStr += "	<td><font color=#0000FF>" + StatusStr + "</font></td>";
                HtmlStr += "	<td><a href=DealWithCenter.jsp?action=buy&Pid=" + Pid + ">购买</a> <a href=DealWithCenter.jsp?action=delfavoritepro&Fid=" + Fid + " onclick=\"return (AlertDel('" + PName + "'));\"><font color=#FF0000>删除</font></a></td>";
              	HtmlStr += "</tr>";
			}
			dbconn.CloseConn();
		}
		catch (SQLException ex) {
			System.err.println("aq.executeQuery:"+ex.getMessage());
		}

		return(HtmlStr);
	}

	//--- 删除收藏货品 ---
	public void DelFavoritePro(String tb_member_favorite,HttpServletRequest request) throws Exception {
		int Fid = handle.getInt(request,"Fid");

		if (Fid != 0) {
			String SqlStr = "DELETE FROM " + tb_member_favorite + " WHERE id=" + Fid;
			dbconn.ExeUpdate(SqlStr);
			dbconn.CloseConn();
		}
	}

	//--- 根据用户帐号，取得其个人信息 ---
	public Hashtable GetAccountInfo(String tb_member_info,HttpSession session) throws Exception {
		ResultSet rs;
		String SqlStr;
		String account;
		Hashtable HashResult = new Hashtable();

		if (session.getAttribute("LoginUser") == null) {
			HashResult.put("r_name","");
			HashResult.put("r_address","");
			HashResult.put("r_tel","");
			return(HashResult);			
		}

		account = handle.GBK2ISO((String)session.getAttribute("LoginUser"));
		try {
			SqlStr = "SELECT * FROM " + tb_member_info + " WHERE account = '" + account + "'";
			rs = dbconn.ExeQuery(SqlStr);
			rs.next();
			HashResult.put("r_name",rs.getString("name"));
			HashResult.put("r_address",rs.getString("address"));
			HashResult.put("r_tel",rs.getString("tel"));
			dbconn.CloseConn();
		}
		catch (SQLException ex) {
			System.err.println("aq.executeQuery:"+ex.getMessage());
		}
		return(HashResult);
	}

	//--- 发送订单 ---
	public void SendOrder(HttpServletRequest request,HttpSession session,String tb_orders_main,String tb_orders_r_info,String tb_shop_catalog,String tb_shop_product_info) throws Exception {
		ResultSet rs;
		String SqlStr;
		String r_name = handle.GBK2ISO(request.getParameter("r_name"));
		String r_address = handle.GBK2ISO(request.getParameter("r_address"));
		String r_tel = handle.GBK2ISO(request.getParameter("r_tel"));
		String note = handle.GBK2ISO(handle.getString(request,"note"));
		int r_info_id=0,product_id,quantity;
		float price;
		Hashtable HashResult = new Hashtable();
		
		SqlStr = "INSERT INTO " + tb_orders_r_info + "(r_name,r_address,r_tel,note,date_time) VALUES('" + r_name + "','" + r_address + "','" + r_tel + "','" + note + "',sysdate())";
		dbconn.ExeUpdate(SqlStr);
		
		try {
			SqlStr = "SELECT * FROM " + tb_orders_r_info + " WHERE r_name = '" + r_name + "' ORDER BY id DESC";
			rs = dbconn.ExeQuery(SqlStr);
			rs.next();
			r_info_id = rs.getInt("id");
		}
		catch (SQLException ex) {
			System.err.println("aq.executeQuery:"+ex.getMessage());
		}

		Vector BuyList = (Vector)session.getAttribute("Car");
		String name = (String)session.getAttribute("LoginUser");
		for (int i=0; i<BuyList.size(); i++) {
			Car car = (Car) BuyList.elementAt(i);
			product_id = car.getPid();
			quantity = car.getQuantity();
			HashResult = ManagerProduct.DetailProInfo(tb_shop_catalog,tb_shop_product_info,product_id);
			price = Float.parseFloat(HashResult.get("price") + "");
			SqlStr = "INSERT INTO " + tb_orders_main + "(name,product_id,r_info_id,price,quantity) VALUES('" + name + "'," + product_id + "," + r_info_id + "," + price + "," + quantity + ")";
			dbconn.ExeUpdate(SqlStr);
			SqlStr = "UPDATE " + tb_shop_product_info + " SET purchase_num = purchase_num + 1 WHERE id = " + product_id;
			dbconn.ExeUpdate(SqlStr);
		}
		KillCar(session,"Car");
		dbconn.CloseConn();
	}

	//--- 订单细节内容 ---
	public Hashtable DetailOrder(HttpServletRequest request,String tb_orders_main,String tb_orders_r_info,String tb_shop_catalog,String tb_shop_product_info) throws Exception {
		Hashtable HashResultIn = new Hashtable();
		Hashtable HashResultOut = new Hashtable();
		ResultSet rs;
		String SqlStr="",pro_name,note="",HtmlStr="";
		String r_name="",r_address="",r_tel="",date_time="";
		int r_info_id = handle.getInt(request,"r_info_id");
		int i=0;
		float price,quantity,sum,all_sum=0;

		try {
			SqlStr = "SELECT * FROM " + tb_orders_r_info + " WHERE id = " + r_info_id;
			rs = dbconn.ExeQuery(SqlStr);
			if (rs.next()) {
				r_name = rs.getString("r_name");
				r_address = rs.getString("r_address");
				r_tel = rs.getString("r_tel");
				date_time = rs.getString("date_time");
			}
			SqlStr = "SELECT * FROM " + tb_orders_main + " AS a," + tb_orders_r_info + " AS b WHERE a.r_info_id = " + r_info_id + " AND a.r_info_id = b.id";
			rs = dbconn.ExeQuery(SqlStr);
			while (rs.next()) {
				i++;
				price = rs.getFloat("price");
				quantity = rs.getFloat("quantity");
				note = rs.getString("note");
				sum = price * quantity;
				all_sum += sum;
				HashResultIn = ManagerProduct.DetailProInfo(tb_shop_catalog,tb_shop_product_info,rs.getInt("product_id"));	
				pro_name = HashResultIn.get("name") + "";

				HtmlStr += "<tr bgcolor=ffffff> \n";
				HtmlStr += "  <td align=center valign=middle>" + i + "</td>\n";
				HtmlStr += "  <td align=center valign=middle>" + pro_name + "</td>\n";
				HtmlStr += "  <td align=center valign=middle><font color=#FF0000>￥" + price + "</font></td>\n";
				HtmlStr += "  <td align=center valign=middle>" + (int)quantity + "</td>\n";
				HtmlStr += "  <td align=center valign=middle><font color=#FF0000>￥" + sum + "</font></td>\n";
				HtmlStr += "</tr>\n";
			}
			dbconn.CloseConn();
		}
		catch (SQLException ex) {
			System.err.println("aq.executeQuery:"+ex.getMessage());
		}

		HashResultOut.put("HtmlStr",HtmlStr);
		HashResultOut.put("all_sum",new Float(all_sum));
		HashResultOut.put("note",note);
		HashResultOut.put("r_name",r_name);
		HashResultOut.put("r_address",r_address);
		HashResultOut.put("r_tel",r_tel);
		HashResultOut.put("date_time",date_time);

		return(HashResultOut);
	}

	//--- 删除订单 ---
	public void DelOrder(HttpServletRequest request,String tb_orders_main,String tb_orders_r_info) throws Exception {
		String SqlStr;
		int r_info_id = handle.getInt(request,"r_info_id");

		SqlStr = "DELETE FROM " + tb_orders_r_info + " WHERE id = " + r_info_id;
		dbconn.ExeUpdate(SqlStr);
		SqlStr = "DELETE FROM " + tb_orders_main + " WHERE r_info_id = " + r_info_id;
		dbconn.ExeUpdate(SqlStr);
		dbconn.CloseConn();
	}

	//--- 标记处理状态 ---
	public void DealStatus(HttpServletRequest request,String tb_orders_r_info) throws Exception {
		int status = handle.getInt(request,"status");
		int r_info_id = handle.getInt(request,"r_info_id");

		String SqlStr = "UPDATE " + tb_orders_r_info + " SET status = " + status + " WHERE id = " + r_info_id;
		dbconn.ExeUpdate(SqlStr);
		dbconn.CloseConn();
	}

	//--- 读取首页数据 ---
	public Hashtable ReadDataAdmin(String page,int pagesize,String SelfPage,String keywords,String type,String tb_orders_main,String tb_orders_r_info) throws Exception {
		String qry_string;
		String HtmlStr="";
		String str_rows_count;
		String PreDateTime="";
		int rows_count = 0;
		float i=0;
		int z;
		int ii=0;
		Statement stmt;
		ResultSet rs;
		Hashtable APageParam = new Hashtable();
		Hashtable AOutParam = new Hashtable();
		String orderid;
		Vector orderBeanVector = new Vector();

		try {
			keywords = handle.GBK2ISO(keywords);

			if (type.equals("orderid")) {
				String keywordsTmp = keywords;
				keywordsTmp = keywordsTmp.substring(0,(keywordsTmp.length() - 14));
				qry_string = "SELECT *,a.id AS mid,b.id AS rid FROM " + tb_orders_main + " AS a," + tb_orders_r_info + " AS b WHERE a.r_info_id = b.id AND b.id=" +  Integer.parseInt(keywordsTmp) + " GROUP BY a.r_info_id ORDER BY b.id DESC";
			}
			else if (type.equals("name")) qry_string = "SELECT *,a.id AS mid,b.id AS rid FROM " + tb_orders_main + " AS a," + tb_orders_r_info + " AS b WHERE a.r_info_id = b.id AND a.name LIKE '%" + keywords + "%' GROUP BY a.r_info_id ORDER BY b.id DESC";
			else if (type.equals("r_name")) qry_string = "SELECT *,a.id AS mid,b.id AS rid FROM " + tb_orders_main + " AS a," + tb_orders_r_info + " AS b WHERE a.r_info_id = b.id AND b.r_name LIKE '%" + keywords + "%' GROUP BY a.r_info_id ORDER BY b.id DESC";
			else qry_string = "SELECT *,a.id AS mid,b.id AS rid FROM " + tb_orders_main + " AS a," + tb_orders_r_info + " AS b WHERE a.r_info_id = b.id GROUP BY a.r_info_id ORDER BY b.id DESC";
			rs = dbconn.ExeQuery(qry_string);
			rs.last();
			rows_count = rs.getRow();

			APageParam = turn_page(page, pagesize, rows_count);

			int pt_st = Integer.parseInt(java.lang.String.valueOf(APageParam.get("pt_st"))) + 1;
			int pt_en = Integer.parseInt(java.lang.String.valueOf(APageParam.get("pt_en"))) + 1;

			rs.absolute(pt_st);
			for (ii=pt_st; ii<pt_en; ii++) {
				i++;
				int rid = rs.getInt("rid");
				orderid = handle.Replace(" ","",rs.getString("date_time"));
				orderid = handle.Replace(":","",orderid);
				orderid = handle.Replace("-","",orderid);
				orderid = java.lang.String.valueOf(rid) + orderid;

				orderBean orderBean = new orderBean();
				orderBean.setRid(rs.getInt("rid"));
				orderBean.setStatus(rs.getInt("status"));
				orderBean.setOrderid(orderid);
				orderBean.setName(rs.getString("name"));
				orderBean.setRName(rs.getString("r_name"));
				orderBean.setRAddress(rs.getString("r_address"));
				orderBean.setRTel(rs.getString("r_tel"));
				orderBean.setDateTime(rs.getString("date_time"));
				orderBeanVector.addElement(orderBean);

				if (!rs.next()) break;
			}
			dbconn.CloseConn();
		}
		catch(SQLException ex) {
			System.err.println("aq.executeQuery:"+ex.getMessage());
		}

		String turnpage_str = search_turn(APageParam, SelfPage, keywords, type);
		
		AOutParam.put("RecordCount",java.lang.String.valueOf(rows_count));
		AOutParam.put("orderBeanVector",orderBeanVector);
		AOutParam.put("TurpageStr",turnpage_str);

		return(AOutParam);
	}

	//--- 翻页函数 ---
	public Hashtable turn_page(String page,int pagesize,int rows_count) {