onlineshop.aspx.cs

用VC++做的一个网上小型网购物系统,需要SQL的支持.

using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.Data .SqlClient ;

namespace _2.D._3
{
	/// <summary>
	/// WebForm1 的摘要说明。
	/// </summary>
	public class WebForm1 : System.Web.UI.Page
	{
		protected System.Web.UI.WebControls.DropDownList ddlcustid;
		protected System.Web.UI.WebControls.Label lblwelcome;
		protected System.Web.UI.WebControls.TextBox txtqty;
		protected System.Web.UI.WebControls.TextBox txtccc;
		protected System.Web.UI.WebControls.TextBox txtccn;
		protected System.Web.UI.WebControls.Label lblqty;
		protected System.Web.UI.WebControls.Label lblmessage;
		protected System.Web.UI.WebControls.Label lbldetails;
		protected System.Web.UI.WebControls.Label lblcid;
		protected System.Web.UI.WebControls.Label lblccn;
		protected System.Web.UI.WebControls.Button bnsubmit;
		protected System.Web.UI.WebControls.Label lblccc;
		protected System.Web.UI.WebControls.RequiredFieldValidator Rfvcustid;
		protected System.Web.UI.WebControls.RequiredFieldValidator Rfvqty;
		protected System.Web.UI.WebControls.RequiredFieldValidator Rfvccc;
		protected System.Web.UI.WebControls.RequiredFieldValidator Rvfccn;
		protected System.Web.UI.WebControls.RegularExpressionValidator Revqty;
		protected System.Web.UI.WebControls.RegularExpressionValidator Revccn;
		public static string prid,pprice;
		SqlConnection myConnection;
		protected System.Web.UI.WebControls.DataGrid dgpdetail;
        static string str1;

		private void Page_Load(object sender, System.EventArgs e)
		{
			string strprodid = Request.QueryString["prodid"];
			str1=strprodid.Substring(0,4);
			string ch=strprodid.Substring(0,1);
			if(ch=="B")
			{
				myConnection=new SqlConnection("server=.;database=WebShoppe;user id=sa;password=;"); 
				SqlDataAdapter myCommand = new SqlDataAdapter("Select * from BooksDetails where BID=@srch",myConnection);
				myCommand.SelectCommand.Parameters.Add("@srch",SqlDbType.NChar,30);
				myCommand.SelectCommand.Parameters["@srch"].Value=str1;
				DataSet ds = new DataSet();
				myCommand.Fill(ds, "BooksDetails");
				dgpdetail.DataSource=ds;
				dgpdetail.DataBind();
				TableCell itemCell1 = dgpdetail.Items[0].Cells[4];
				pprice=itemCell1.Text;
			}
			if(ch=="F")
			{
				myConnection=new SqlConnection("server=.;database=WebShoppe;user id=sa;password=;"); 
				SqlDataAdapter myCommand = new SqlDataAdapter("Select * from FlowersDetails where FID=@srch",myConnection);
				myCommand.SelectCommand.Parameters.Add("@srch",SqlDbType.NChar,30);
				myCommand.SelectCommand.Parameters["@srch"].Value=str1;
				DataSet ds = new DataSet();
				myCommand.Fill(ds, "FlowersDetails");
				dgpdetail.DataSource=ds;
				dgpdetail.DataBind();
				TableCell itemCell1 = dgpdetail.Items[0].Cells[3];
				pprice=itemCell1.Text;
			}
			if(ch=="T")
			{
				myConnection=new SqlConnection("server=.;database=WebShoppe;user id=sa;password=;"); 
				SqlDataAdapter myCommand = new SqlDataAdapter("Select * from ToysDetails where TID=@srch",myConnection);
				myCommand.SelectCommand.Parameters.Add("@srch",SqlDbType.NChar,30);
				myCommand.SelectCommand.Parameters["@srch"].Value=str1;
				DataSet ds = new DataSet();
				myCommand.Fill(ds, "ToysDetails");
				dgpdetail.DataSource=ds;
				dgpdetail.DataBind();
				TableCell itemCell1 = dgpdetail.Items[0].Cells[3];
				pprice=itemCell1.Text;
			}
			
			DataSet dscust = new DataSet();
			myConnection = new SqlConnection("server=.;database=WebShoppe;user id=sa;password=;");
			SqlDataAdapter mcommand = new SqlDataAdapter("select CustID from CustomerDetails", myConnection);
			mcommand.Fill(dscust, "CustomerDetails");
			DataTable dt = new DataTable();	
			DataRow[] dr= new DataRow[100];
			ArrayList customers = new ArrayList();
			dt=dscust.Tables["CustomerDetails"];
			dr=dt.Select();
			for(int i=0;i<dr.Length;i++)
			{
				customers.Add(dr[i]["CustID"].ToString());
			}
			ddlcustid.DataSource=customers;
			ddlcustid.DataBind();

		}

		#region Web 窗体设计器生成的代码
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: 该调用是 ASP.NET Web 窗体设计器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 设计器支持所需的方法 - 不要使用代码编辑器修改
		/// 此方法的内容。
		/// </summary>
		private void InitializeComponent()
		{    
			this.bnsubmit.Click += new System.EventHandler(this.bnsubmit_Click);
			this.Load += new System.EventHandler(this.Page_Load);

		}
		#endregion

		private void bnsubmit_Click(object sender, System.EventArgs e)
		{
			if(!Page.IsValid)
			{
				lbldetails.Text = "There is some problem with the details that you have entered.Please ensure that all fields have proper values.";
			}
			else
			{
				string prid = Request.QueryString["prodid"];
				DataSet dscust = new DataSet ();
				myConnection = new SqlConnection ("server=172.21.10.20;database=WebShoppe;user id =sa;password=");
				SqlCommand insertCmd = new SqlCommand ("insertrecords",myConnection);
				insertCmd.CommandType = CommandType.StoredProcedure ;
				insertCmd.Parameters .Add (new SqlParameter ("@invid",SqlDbType.NChar,10));
				insertCmd.Parameters .Add (new SqlParameter ("@idate",SqlDbType.NChar,10));
				insertCmd.Parameters .Add (new SqlParameter ("@prodid",SqlDbType.NChar,10));
				insertCmd.Parameters .Add (new SqlParameter ("@custid",SqlDbType.NChar,10));
				insertCmd.Parameters .Add (new SqlParameter ("@qt",SqlDbType.Int));
				insertCmd.Parameters .Add (new SqlParameter ("@prodprice",SqlDbType.Int));
				insertCmd.Parameters .Add (new SqlParameter ("@tprice",SqlDbType.Int));
				insertCmd.Parameters .Add (new SqlParameter ("@ccc",SqlDbType.NChar,10));
				insertCmd.Parameters .Add (new SqlParameter ("@ccn",SqlDbType.NChar,10));
                insertCmd.Parameters["@idate"].Value =System.DateTime .Today .ToString ();
				insertCmd.Parameters["@custid"].Value =ddlcustid.SelectedItem .ToString ();
                insertCmd.Parameters["@qt"].Value =System.Convert .ToInt16 (txtqty.Text );
				insertCmd.Parameters["@prodprice"].Value =pprice.ToString ();
			    insertCmd.Parameters["@tprice"].Value =(System.Convert.ToInt16 (insertCmd.Parameters ["@qt"].Value .ToString ()))*(System.Convert.ToInt16 (insertCmd.Parameters ["@prodprice"].Value .ToString ()));
			    insertCmd.Parameters ["@ccc"].Value =txtccc.Text .ToString ();
				insertCmd.Parameters ["@ccn"].Value =txtccn.Text .ToString ();
				insertCmd.Parameters ["@prodid"].Value =prid.ToString ();
				DataSet dsinv = new DataSet ();
				SqlDataAdapter mcommand = new SqlDataAdapter ("select InvID from OrderDetails",myConnection);
				mcommand.Fill (dsinv,"OrderDetails");
				DataTable dt = new DataTable ();
				DataRow[] dr = new DataRow [100];
				dt = dsinv.Tables ["OrderDetails"];
				string id;
				id = dt.Rows [dt.Rows .Count -1]["InvID"].ToString ();
				string str;
				str = id.Substring (1,3);
				int y;
				y = System.Convert .ToInt16 (str);
                y = y+1;

				if(y>1 && y<=9)
				{
					insertCmd.Parameters ["@invid"].Value = "I00" + y;
				}

				if(y>9 && y<=99)
				{
					insertCmd.Parameters ["@invid"].Value = "I0" + y;
				}

				if(y>99)
				{
					insertCmd.Parameters ["@invid"].Value = "I" + y;
				}
				try
				{
					insertCmd.Connection .Open ();
					insertCmd.ExecuteNonQuery ();
				}
				catch(System.FormatException exc)
				{
				   lblmessage.Text = "Source:" + exc.Source ;
				}
                string cid = ddlcustid.SelectedItem .Value ;
				Response.Redirect ("Orders.aspx?cid=" + System.Web .HttpUtility .UrlEncode (cid));
			}
		}

	}
}