medinsert.aspx.cs

一个自制的药房销售管理系统

using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

namespace medicine
{
	/// <summary>
	/// medinsert 的摘要说明。
	/// </summary>
	public class medinsert : System.Web.UI.Page
	{
		protected System.Web.UI.WebControls.Button log;
		protected System.Web.UI.WebControls.TextBox password;
		protected System.Web.UI.WebControls.TextBox name;
		protected System.Web.UI.WebControls.TextBox TextBox6;
		protected System.Web.UI.WebControls.TextBox TextBox5;
		protected System.Web.UI.WebControls.TextBox TextBox4;
		protected System.Web.UI.WebControls.TextBox TextBox3;
		protected System.Web.UI.WebControls.TextBox TextBox2;
		protected System.Web.UI.WebControls.TextBox TextBox1;
		protected System.Web.UI.WebControls.Panel PanelModify;
		protected System.Web.UI.WebControls.TextBox TextBox7;
		protected System.Web.UI.WebControls.Button insert;
		protected System.Web.UI.WebControls.Label label;
		protected System.Web.UI.WebControls.Panel loginpanel;
	
		private void Page_Load(object sender, System.EventArgs e)
		{
			if(IsPostBack)	return;
			load();
		}

		private void load()					//页面中两大表格的刷新
		{
			if((string)Session["name"]==null)
			{
				loginpanel.Visible=true;
				PanelModify.Visible=false;
			}
			else
			{
				loginpanel.Visible=false;
				PanelModify.Visible=true;
			}
		}

		#region Web 窗体设计器生成的代码
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: 该调用是 ASP.NET Web 窗体设计器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 设计器支持所需的方法 - 不要使用代码编辑器修改
		/// 此方法的内容。
		/// </summary>
		private void InitializeComponent()
		{    
			this.log.Click += new System.EventHandler(this.log_Click);
			this.insert.Click += new System.EventHandler(this.insert_Click);
			this.Load += new System.EventHandler(this.Page_Load);

		}
		#endregion

		private void log_Click(object sender, System.EventArgs e)
		{
			SqlConnection con=new SqlConnection(System.Configuration.ConfigurationSettings.AppSettings["con"]);	
			con.Open();
			string sel="SELECT name FROM admin WHERE (name = @name) AND (password = @password)";
			SqlCommand cmd=new SqlCommand(sel,con);
			cmd.Parameters.Add("@name",SqlDbType.NVarChar,50);
			cmd.Parameters["@name"].Value=name.Text;
			cmd.Parameters.Add("@password",SqlDbType.NVarChar,50);
			cmd.Parameters["@password"].Value=encode.code(password.Text);	//加密后的密码
			string s=encode.code(password.Text);
			object x=cmd.ExecuteScalar();
			if(x!=null)	
			{
				Session["name"]=x.ToString();
				this.Response.Redirect(this.Request.RawUrl.ToString());		//刷新页面
			}
			else Response.Write("<script language=javascript>alert('用户名或密码错误,请重新输入');</script>");
		}

		private void insert_Click(object sender, System.EventArgs e)
		{
			if(TextBox1.Text=="" || TextBox2.Text=="" || TextBox3.Text=="" || TextBox4.Text=="" || TextBox5.Text=="" || TextBox6.Text=="" || TextBox7.Text=="")
			{
				Response.Write("<script language=javascript>alert('请填写完整的信息');</script>");
				return;
			}
			SqlConnection con=new SqlConnection(System.Configuration.ConfigurationSettings.AppSettings["con"]);	
			con.Open();
			string sel="INSERT into medicine (mname,price,product_place,product_time,store_time,number,note) values(@mname,@price,@product_place,@product_time,@store_time,@number,@note)";
			SqlCommand cmd=new SqlCommand(sel,con);

			cmd.Parameters.Add("@mname",SqlDbType.NVarChar,40);
			cmd.Parameters["@mname"].Value=TextBox1.Text;

			cmd.Parameters.Add("@price",SqlDbType.Float,8);
			cmd.Parameters["@price"].Value=TextBox2.Text;

			cmd.Parameters.Add("@product_place",SqlDbType.NVarChar,40);
			cmd.Parameters["@product_place"].Value=TextBox3.Text;

			cmd.Parameters.Add("@product_time",SqlDbType.DateTime,8);
			cmd.Parameters["@product_time"].Value=TextBox4.Text;
			
			cmd.Parameters.Add("@store_time",SqlDbType.Int,4);
			cmd.Parameters["@store_time"].Value=TextBox5.Text;

			cmd.Parameters.Add("@number",SqlDbType.Int,4);
			cmd.Parameters["@number"].Value=TextBox6.Text;		

			cmd.Parameters.Add("@note",SqlDbType.NText,512);
			cmd.Parameters["@note"].Value=TextBox7.Text;

			cmd.ExecuteScalar();
			label.Text="插入数据成功";
		}
	}
}