out.aspx.vb

这是用ASP.NET和SQLserver编写的购物网站的程序

Imports System.Data.SqlClient
Imports System.Data
Public Class out
    Inherits System.Web.UI.Page
    Dim into As String = ConfigurationSettings.AppSettings("ConnectionString")
    Dim com As New SqlCommand
    Protected WithEvents DataGrid1 As System.Web.UI.WebControls.DataGrid
    Protected WithEvents DataGrid2 As System.Web.UI.WebControls.DataGrid
    Protected WithEvents Label1 As System.Web.UI.WebControls.Label
    Protected WithEvents Button2 As System.Web.UI.WebControls.Button
    Dim con As SqlConnection = New SqlConnection(into)
#Region " Web 窗体设计器生成的代码 "

    '该调用是 Web 窗体设计器所必需的。
    <System.Diagnostics.DebuggerStepThrough()> Private Sub InitializeComponent()

    End Sub

    '注意: 以下占位符声明是 Web 窗体设计器所必需的。
    '不要删除或移动它。
    Private designerPlaceholderDeclaration As System.Object

    Private Sub Page_Init(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Init
        'CODEGEN: 此方法调用是 Web 窗体设计器所必需的
        '不要使用代码编辑器修改它。
        InitializeComponent()
    End Sub

#End Region

    Private Sub Page_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
        '在此处放置初始化页的用户代码
        If Not IsPostBack() Then
            Try
                If (Session("userpower") <> 2) Then
                    Response.End()
                End If
            Catch ex As Exception
                Response.Write("您还没有登录,请登录后再操作,<a href='managerlogin.aspx'>登录</a>")
                Response.End()
            End Try
            Session("userpower") = -1
            con.Open()
            com.CommandText = "select orderid 订单号,orderdate 订单日期,totalprice 总价 from orders where status=0"
            com.Connection = con
            Dim da As New SqlClient.SqlDataAdapter(com.CommandText, con)
            Dim ds As New DataSet
            da.Fill(ds)
            DataGrid1.DataSource = ds
            DataGrid1.DataBind()
            con.Close()
        End If

    End Sub

    Private Sub DataGrid1_SelectedIndexChanged(ByVal sender As System.Object, ByVal e As System.EventArgs)

    End Sub

    Private Sub DataGrid2_SelectedIndexChanged(ByVal sender As System.Object, ByVal e As System.EventArgs)

    End Sub


    Private Sub DataGrid1_PageIndexChanged(ByVal source As System.Object, ByVal e As System.Web.UI.WebControls.DataGridPageChangedEventArgs)
        DataGrid1.CurrentPageIndex = e.NewPageIndex
        con.Open()
        com.CommandText = "select orderid 订单号,orderdate 订单日期,totalprice 总价 from orders where status=0"
        com.Connection = con
        Dim da As New SqlClient.SqlDataAdapter(com.CommandText, con)
        Dim ds As New DataSet
        da.Fill(ds)
        DataGrid1.DataSource = ds
        DataGrid1.DataBind()
        con.Close()
    End Sub


    Private Sub DataGrid1_ItemCommand(ByVal source As Object, ByVal e As System.Web.UI.WebControls.DataGridCommandEventArgs) Handles DataGrid1.ItemCommand
        Dim strscript As String
        If e.CommandName <> "Delete" Then
            Dim id As String = DataGrid1.DataKeys(e.Item.ItemIndex)
            Dim cmd As New SqlCommand
            con.Open()
            cmd.CommandText = "update orders set status=1 where orderid='" & id & "'"
            cmd.Connection = con
            Try
                cmd.ExecuteNonQuery()
                strscript = "<script language = javascript>alert('发货成功')</script>"
                RegisterClientScriptBlock("系统消息", strscript)
            Catch ex As Exception
                strscript = "<script language = javascript>alert('发货不成功')</script>"
                RegisterClientScriptBlock("系统消息", strscript)
            End Try
            com.CommandText = "select orderid 订单号,orderdate 订单日期,totalprice 总价 from orders where status=0"
            com.Connection = con
            Dim da As New SqlClient.SqlDataAdapter(com.CommandText, con)
            Dim ds As New DataSet
            da.Fill(ds)
            DataGrid1.DataSource = ds
            DataGrid1.DataBind()
            DataGrid2.Visible = False
            Dim cmd1 As SqlCommand
            Dim message As New Mail.MailMessage
            cmd1.CommandText = "select userid from orderid=" & id
            cmd1.Connection = con
            Dim s As String = cmd1.ExecuteScalar()
            cmd1.CommandText = "select e_mail from account where userid='" & s & "'"
            cmd1.Connection = con
            Dim email As String = cmd1.ExecuteScalar()
            message.From = "[e-mail]"
            message.To = email
            message.Subject = "数码大世界"
            message.Body = "您在数码大世界的订单:" & id & "已经发货,如需知道详细信息，请您登陆我们的网站"
            message.Fields.Add("http://schemas.microsoft.com/cdo/configuration/smtpauthenticate", "1")
            message.Fields.Add("http://schemas.microsoft.com/cdo/configuration/sendusername", "ecdb_firstgroup")
            message.Fields.Add("http://schemas.microsoft.com/cdo/configuration/sendpassword", "200343")

            Mail.SmtpMail.SmtpServer = "smtp.163.com"

            Mail.SmtpMail.Send(message)
            con.Close()
        Else
            con.Open()
            Dim s As String = DataGrid1.DataKeys(e.Item.ItemIndex)
            com.CommandText = "select itemname 商品名,quentity 数量,untiprice 单价,totalprice 总价 from lineitem,item where item.itemid=lineitem.itemid and orderid=" & s
            com.Connection = con
            Dim da As New SqlClient.SqlDataAdapter(com.CommandText, con)
            Dim ds As New DataSet
            da.Fill(ds)
            DataGrid2.DataSource = ds
            DataGrid2.DataBind()
            DataGrid2.Visible = True
            con.Close()
        End If

    End Sub

    Private Sub Button2_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button2.Click
        Session("userpower") = 2
        Response.Redirect("manager.aspx")
    End Sub
End Class