orders.aspx.cs

用VC++做的一个网上小型网购物系统,需要SQL的支持.

using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.Data .SqlClient ;

namespace _2.D._3
{
	/// <summary>
	/// Orders 的摘要说明。
	/// </summary>
	
	
	public class Orders : System.Web.UI.Page
	{
		protected System.Web.UI.WebControls.Label lblwelcome;
		protected System.Web.UI.WebControls.Label lblorder;
		protected System.Web.UI.WebControls.Label lblconfirm;
		protected System.Web.UI.WebControls.DataGrid dgorderdetail;
	
		SqlConnection myConnection;

		string pvalue,prod;
		private void Page_Load(object sender, System.EventArgs e)
		{
			if(!Page.IsPostBack )
			{
				BindGrid();
			}
		}

		public void BindGrid()
		{
			myConnection = new SqlConnection("server=.;database=webshoppe;user id=sa;password=;"); 
			string strcid = Request.QueryString["cid"];
			SqlDataAdapter orderdet = new SqlDataAdapter("select * from OrderDetails where CID=@Id and InvDate=@idate", myConnection);
			orderdet.SelectCommand.Parameters.Add(new SqlParameter("@Id",SqlDbType.NChar, 10));
			orderdet.SelectCommand.Parameters.Add(new SqlParameter("@idate",SqlDbType.NChar, 10));	
			orderdet.SelectCommand.Parameters["@Id"].Value=strcid;
			orderdet.SelectCommand.Parameters["@idate"].Value =System.DateTime.Today.ToString();
			DataSet ds = new DataSet();		
			orderdet.Fill(ds, "OrderDetails");
			dgorderdetail.DataSource=ds;
			dgorderdetail.DataBind();
			lblconfirm.Visible=false;
		}

		#region Web 窗体设计器生成的代码
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: 该调用是 ASP.NET Web 窗体设计器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 设计器支持所需的方法 - 不要使用代码编辑器修改
		/// 此方法的内容。
		/// </summary>
		private void InitializeComponent()
		{    
			this.dgorderdetail.CancelCommand += new System.Web.UI.WebControls.DataGridCommandEventHandler(this.dgorderdetail_CancelCommand);
			this.dgorderdetail.EditCommand += new System.Web.UI.WebControls.DataGridCommandEventHandler(this.dgorderdetail_EditCommand);
			this.dgorderdetail.UpdateCommand += new System.Web.UI.WebControls.DataGridCommandEventHandler(this.dgorderdetail_UpdateCommand);
			this.dgorderdetail.DeleteCommand += new System.Web.UI.WebControls.DataGridCommandEventHandler(this.dgorderdetail_DeleteCommand);
			this.Load += new System.EventHandler(this.Page_Load);

		}
		#endregion

		private void dgorderdetail_DeleteCommand(object source, System.Web.UI.WebControls.DataGridCommandEventArgs e)
		{
			string invid;
			TableCell id=e.Item.Cells[1];
			invid=id.Text;
			myConnection = new SqlConnection("server=.;database=webshoppe;user id=sa;password=;");
			SqlCommand deleteCmd = new SqlCommand ("deleterecords",myConnection);
			deleteCmd.CommandType=CommandType.StoredProcedure;
			deleteCmd.Parameters.Add(new SqlParameter("@Id", SqlDbType.NChar, 10));
			deleteCmd.Parameters["@Id"].Value=dgorderdetail.DataKeys[(int)e.Item.ItemIndex];
			deleteCmd.Connection.Open();
			deleteCmd.ExecuteNonQuery();
			BindGrid();
			lblconfirm.Visible=true;
			lblconfirm.Text="The order with invoice number " +invid +" has been successfully deleted";
		}
		
		private void dgorderdetail_EditCommand(object source, System.Web.UI.WebControls.DataGridCommandEventArgs e)
		{
			dgorderdetail.EditItemIndex = (int)e.Item.ItemIndex;	
			BindGrid();
		}
		
		private void dgorderdetail_CancelCommand(object source, System.Web.UI.WebControls.DataGridCommandEventArgs e)
		{
			dgorderdetail.EditItemIndex = -1;	
			BindGrid();
		}
		private void dgorderdetail_UpdateCommand(object source, System.Web.UI.WebControls.DataGridCommandEventArgs e)
		{
			TableCell cust = e.Item.Cells[5];			
			myConnection = new SqlConnection("server=.;database=WebShoppe;user id =sa;password=;");	
			SqlCommand myCommand = new SqlCommand("updaterecords", myConnection);	
			myCommand.CommandType=CommandType.StoredProcedure;	
			
			myCommand.Parameters.Add(new SqlParameter("@invid",SqlDbType.NChar,10)); 	
			myCommand.Parameters.Add(new SqlParameter("@idate", SqlDbType.NChar,10));	
			myCommand.Parameters.Add(new SqlParameter("@prodid", SqlDbType.NChar,10));
			myCommand.Parameters.Add(new SqlParameter("@custid", SqlDbType.NChar,10));

			myCommand.Parameters.Add(new SqlParameter("@qt", SqlDbType.Int));	
			myCommand.Parameters.Add(new SqlParameter("@pr", SqlDbType.Int));	
			myCommand.Parameters.Add(new SqlParameter("@tp", SqlDbType.Int));	
			myCommand.Parameters.Add(new SqlParameter("@ccc", SqlDbType.NChar,30));
			myCommand.Parameters.Add(new SqlParameter("@ccn", SqlDbType.NChar,30));

			myCommand.Parameters["@invid"].Value = dgorderdetail.DataKeys[(int)e.Item.ItemIndex];

			string[] cols = {"@idate","@prodid","@custid","@qt","@pr","@tp","@ccc","@ccn"};	
			int numCols = e.Item.Cells.Count;	
			myCommand.Parameters["@idate"].Value=System.DateTime.Now.ToString();	
			myCommand.Parameters["@prodid"].Value=((TextBox)e.Item.Cells[4].Controls[0]).Text;

			myCommand.Parameters["@custid"].Value=cust.Text;	
			myCommand.Parameters["@qt"].Value=((TextBox)e.Item.Cells[6].Controls[0]).Text;			
			prod=myCommand.Parameters["@prodid"].Value.ToString();	
			string exprod=prod.Substring(0,1);

			if (exprod=="T")	
			{	
				SqlDataAdapter mcommand1 = new SqlDataAdapter("select TPrice from ToysDetails where TID=@id", myConnection); 	
				mcommand1.SelectCommand.Parameters.Add(new SqlParameter("@id", SqlDbType.NChar,30));	
				mcommand1.SelectCommand.Parameters["@id"].Value=prod.ToString();	
				DataSet dst=new DataSet();	
				mcommand1.Fill(dst, "ToysDetails");	
				DataTable dt2 = new DataTable();	
				dt2=dst.Tables["ToysDetails"];	
				DataRow[] dr2=new DataRow[10];	
				dr2=dt2.Select();	
				pvalue=dr2[0]["TPrice"].ToString();	
			}

			if (exprod=="B")	
			{	
				SqlDataAdapter mcommand = new SqlDataAdapter("select BookPrice from BooksDetails where BID=@id", myConnection); 	
				mcommand.SelectCommand.Parameters.Add(new SqlParameter("@id", SqlDbType.NChar,30));	
				mcommand.SelectCommand.Parameters["@id"].Value=prod.ToString();	
				DataSet dst1=new DataSet();	
				mcommand.Fill(dst1, "BooksDetails");	
				DataTable dt1 = new DataTable();	
				dt1=dst1.Tables["BooksDetails"];	
				DataRow[] dr1=new DataRow[10];	
				dr1=dt1.Select();	
				pvalue=dr1[0]["BookPrice"].ToString();	
			}

			if (exprod=="F")	
			{	
				SqlDataAdapter mcommand2 = new SqlDataAdapter("select FPrice from FlowersDetails where FID=@id", myConnection); 	
				mcommand2.SelectCommand.Parameters.Add(new SqlParameter("@id", SqlDbType.NChar,30));	
				mcommand2.SelectCommand.Parameters["@id"].Value=prod.ToString();	
				DataSet dst2=new DataSet();	
				mcommand2.Fill(dst2, "FlowersDetails");	
				DataTable dt = new DataTable();	
				dt=dst2.Tables["FlowersDetails"];	
				DataRow[] dr=new DataRow[10];	
				dr=dt.Select();	
				pvalue=dr[0]["FPrice"].ToString();	
			}

			myCommand.Parameters["@pr"].Value=pvalue.ToString();		
			myCommand.Parameters["@tp"].Value=System.Convert.ToInt16(myCommand.Parameters["@pr"].Value.ToString())*System.Convert.ToInt16(myCommand.Parameters["@qt"].Value.ToString());	
			myCommand.Parameters["@ccc"].Value=((TextBox)e.Item.Cells[9].Controls[0]).Text;
			myCommand.Parameters["@ccn"].Value=((TextBox)e.Item.Cells[10].Controls[0]).Text;
			myCommand.Connection.Open();	
			myCommand.ExecuteNonQuery();	
			dgorderdetail.EditItemIndex = -1;	
			myCommand.Connection.Close();
			BindGrid();
			lblconfirm.Visible=true;
			lblconfirm.Text="The order has been successfully updated";
		}

	}
}