edit.aspx.cs

功能介绍： 支持站长管理（删除、修改、回复） 支持邮件发送 支持数据库加密码 留言含邮箱、主页、QQ、MSN、来自、邮件提示、IP获取、回复等功能 初始用户:admin 密码:admin

using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Data.SqlClient ;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.Web.Mail;

namespace Gbook
{
	/// <summary>
	/// Edit 的摘要说明。
	/// </summary>
	public class Edit : System.Web.UI.Page
	{
		protected System.Web.UI.WebControls.RadioButtonList GM_FACE;
		protected System.Web.UI.WebControls.TextBox GM_CONTENT;
		protected System.Web.UI.WebControls.TextBox GM_MSN;
		protected System.Web.UI.WebControls.TextBox GM_OICQ;
		protected System.Web.UI.WebControls.TextBox GM_HOMEPAGE;
		protected System.Web.UI.WebControls.TextBox GM_EMAIL;
		protected System.Web.UI.WebControls.TextBox GM_NAME;
		protected System.Web.UI.WebControls.TextBox GM_REPLY;
		protected System.Web.UI.WebControls.DropDownList GM_AREA;
		protected System.Web.UI.WebControls.CheckBox GM_REPLY_EMAIL;
		protected System.Web.UI.WebControls.Button btnSubmit;
		protected System.Web.UI.WebControls.Button btnLogout;
		protected System.Web.UI.WebControls.RequiredFieldValidator RF_EMAIL;
		protected System.Web.UI.WebControls.RequiredFieldValidator RF_NAME;
		protected System.Web.UI.WebControls.RequiredFieldValidator RF_MESSAGE;
		protected System.Web.UI.WebControls.RegularExpressionValidator RE_MSN;
		protected System.Web.UI.WebControls.RegularExpressionValidator RF_OICQ;
		protected System.Web.UI.WebControls.RegularExpressionValidator RE_HOMEPAGE;
		protected System.Web.UI.WebControls.RegularExpressionValidator RE_EMAIL;
		protected System.Web.UI.WebControls.ValidationSummary ValidationSummary1;
		protected System.Web.UI.WebControls.Label lblMessage;
		protected System.Web.UI.HtmlControls.HtmlInputHidden GMID;
		private Gbook.Conn myConn			= new Gbook.Conn();

		// [打开数据库]
		/// <summary>
		/// 获取数据库连接
		/// </summary>
		private string strConn
		{
			get	{	return myConn.ConnString();}
		}
	
		private void Page_Load(object sender, System.EventArgs e)
		{
			if(Request.Cookies["MyCookies"] == null) 
			{
				Response.Redirect("Login.aspx");
			}
			else
			{
				if(!Page.IsPostBack) 
				{
					string GM_ID = Request.QueryString["GM_ID"].ToString();
					if (GM_ID.Trim() == "" || GM_ID == null)
					{	
						Response.Redirect(Request.ServerVariables["HTTP_REFERER"]);
					}
					GMID.Value = GM_ID;	// 设置表单中ID号
					// -----------	数据库连接	-----------
					SqlConnection myConnection	= new SqlConnection(strConn);
					myConnection.Open();

					// -----------	查询数据表的记录总数	-----------
					string strSQLCmd1	= "Select Top 1 * From GuestBook_Message Where GM_ID='" + GM_ID + "'";
					SqlCommand SQLCmd1	= new SqlCommand(strSQLCmd1, myConnection);
					SqlDataReader dr1 = SQLCmd1.ExecuteReader();
					try 
					{
						dr1.Read();
						if (dr1.HasRows)
						{
							// -----------	获取值	-----------
							GM_NAME.Text			= dr1["GM_NAME"].ToString();
							GM_EMAIL.Text			= dr1["GM_EMAIL"].ToString();
							GM_HOMEPAGE.Text		= dr1["GM_HOMEPAGE"].ToString();
							GM_OICQ.Text			= dr1["GM_OICQ"].ToString();
							GM_MSN.Text				= dr1["GM_MSN"].ToString();
							GM_CONTENT.Text			= dr1["GM_CONTENT"].ToString().Replace("<br>","\n").Replace("<","&lt;").Replace(">","&gt;");
							GM_REPLY.Text			= dr1["GM_REPLY"].ToString().Replace("<br>","\n").Replace("<","&lt;").Replace(">","&gt;");
							GM_AREA.SelectedValue	= dr1["GM_AREA"].ToString();
							GM_FACE.SelectedValue	= dr1["GM_FACE"].ToString();
							if ((bool)dr1["GM_REPLY_EMAIL"] == true) 
							{
								GM_REPLY_EMAIL.Checked	= true;
							}
						}
						else
						{
							lblMessage.Visible	= true;
							lblMessage.Text		= "对不起，ID为 [ " + GM_ID + " ] 的记录不存在！<br>";
							string Refer = Request.ServerVariables["HTTP_REFERER"];
							if ((Refer != "") || (Refer != null))
								Response.Redirect(Refer.ToString());		// 跳转到上一页！
							else
								Response.Redirect("Admin.aspx");
						}
					}
					catch (SqlException ex)
					{
						lblMessage.Visible	= true;
						lblMessage.Text		= ex.Message;
					}
					finally
					{
						dr1.Close();
						SQLCmd1.Dispose();
						myConnection.Close();
					}
				}
			}
		}

		#region Web 窗体设计器生成的代码
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: 该调用是 ASP.NET Web 窗体设计器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 设计器支持所需的方法 - 不要使用代码编辑器修改
		/// 此方法的内容。
		/// </summary>
		private void InitializeComponent()
		{    
			this.Load += new System.EventHandler(this.Page_Load);
			this.btnLogout.Click += new System.EventHandler(this.btnLogout_Click);
			this.btnSubmit.Click += new System.EventHandler(this.btnSubmit_Click);
		}
		#endregion

		private void btnSubmit_Click(object sender, System.EventArgs e)
		{
			// -----------	数据库连接	-----------
			SqlConnection myConnection = new SqlConnection(strConn);
			int GM_ID = System.Int32.Parse(GMID.Value);

			string REPLY_EMAIL,txtHOMEPAGE,txtCONTENT,txtREPLY;
			if(GM_REPLY_EMAIL.Checked)		REPLY_EMAIL = "1";
			else							REPLY_EMAIL = "0";
			if(GM_HOMEPAGE.Text=="http://")	txtHOMEPAGE = "";
			else							txtHOMEPAGE = GM_HOMEPAGE.Text;
			txtCONTENT = GM_CONTENT.Text.ToString().Trim().Replace("\n","<br>").Replace("'","").Replace("<","&lt;").Replace(">","&gt;");
			txtREPLY   = GM_REPLY.Text.ToString().Trim().Replace("\n","<br>").Replace("'","").Replace("<","&lt;").Replace(">","&gt;");
			DateTime NowTime = DateTime.Now;

			string SqlCmd  = "Update GuestBook_Message set ";
			SqlCmd += "GM_NAME			='" + GM_NAME.Text			+ "',";
			SqlCmd += "GM_EMAIL			='" + GM_EMAIL.Text			+ "',";
			SqlCmd += "GM_HOMEPAGE		='" + txtHOMEPAGE			+ "',";
			SqlCmd += "GM_FACE			='" + GM_FACE.SelectedValue	+ "',";
			SqlCmd += "GM_AREA			='" + GM_AREA.SelectedValue	+ "',";
			SqlCmd += "GM_CONTENT		='" + txtCONTENT			+ "',";
			SqlCmd += "GM_REPLY			='" + txtREPLY.ToString()	+ "',";
			SqlCmd += "GM_REPLY_EMAIL	='" + REPLY_EMAIL			+ "',";
			SqlCmd += "GM_RETIME		='" + NowTime				+ "' ";
			SqlCmd += "Where GM_ID		='" + GM_ID					+ "'";
			SqlCommand myCommand = new SqlCommand(SqlCmd, myConnection);
			myConnection.Open();
			try
			{
				myCommand.ExecuteNonQuery();
				if (REPLY_EMAIL == "1") 
				{
					// -----------	发送邮件	-----------
					MailMessage message = new MailMessage();
					message.BodyFormat	= MailFormat.Text;
					message.From		= "[e-mail]";
					message.To			= GM_EMAIL.Text.Trim();
					message.Subject		= "测试邮件";
					message.Body		= txtCONTENT;
					try
					{
						SmtpMail.SmtpServer = "localhost";
						SmtpMail.Send(message);
					}
					catch(Exception ex)
					{	
						lblMessage.Visible  = true;
						lblMessage.Text		= ex.Message;
					}
				}
				Response.Redirect("Admin.aspx");
			}
			catch(SqlException ex)
			{	
				lblMessage.Visible  = true;
				lblMessage.Text		= ex.Message;
			}
				/*
			finally
			{
				myCommand.Dispose();
				myConnection.Close();
			}
			*/
		}

		private void btnLogout_Click(object sender, System.EventArgs e)
		{
			Response.Cookies["MyCookies"].Expires = DateTime.Now.AddTicks(1);
			Response.Redirect("Index.aspx");
		}
	}
}