userdao.cs.svn-base

医院医德医风管理系统 B/S架构

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System .Collections .Generic ;
using System.Data.Sql;
using System.Data.SqlClient;

/// <summary>
/// UserDAO 的摘要说明
/// </summary>
public class UserDAO
{
    private static string constr = ConfigurationManager.ConnectionStrings["dahuaConnectionString"].ConnectionString;
	public UserDAO()
	{
		//
		// TODO: 在此处添加构造函数逻辑
		//
	}
    public static List<SysUser> GetUser()
    {
        List<SysUser> list = new List<SysUser>();
        using(SqlConnection con=new SqlConnection (constr))
        {
            string sql = "select * from SysUser";
            SqlCommand cmd = new SqlCommand(sql, con);
            con.Open();
            SqlDataReader read = cmd.ExecuteReader();
            while (read.Read())
            {
                SysUser u=new SysUser() ;
                SetUser(u,read);
                list.Add(u);

            }
            read.Close();
            con.Close();
        }
        return list;
    }
    public static SysUser GetUserByUserName(string name)
    {
        SysUser u = new SysUser();
        using (SqlConnection con = new SqlConnection(constr))
        {
            string sql = "select * from SysUser where UserName=@UserName";
            SqlCommand cmd = new SqlCommand(sql, con);
            cmd.Parameters.Add(new SqlParameter ("@UserName",name));
            con.Open();
            SqlDataReader read = cmd.ExecuteReader();
            while (read.Read())
            {                
                SetUser(u, read);

            }
            read.Close();
            con.Close();
        }
        return u ;
    }
    public static void SetUser(SysUser u,SqlDataReader read)
    {
        u.UserId = (int)read["UserId"];
        u.UserName = read["UserName"].ToString();
        u.Password =read ["Password"].ToString ();
        u.Role=(int)read ["Role"];
        u.Module =(int)read ["Module"];
    
    }
    public static bool UpUser(SysUser u)
    {
        using (SqlConnection con = new SqlConnection(constr))
        {
            con.Open();
            string sql = "update SysUser set ";
            if (u.Password != null)
                sql += " Password=@Password";
            if (u.UserName!=null)
               sql+=",UserName=@UserName,";
            if (u.Role != -1)
            sql+="Role=@Role,";
            if (u.Module != -1)
                sql+="Module=@Module";
            sql+=" where UserId=@UserId";
            SqlCommand cmd = new SqlCommand(sql,con);
            cmd.Parameters.Add(new SqlParameter("@UserId", u.UserId));
            if (u.Password != null)
                cmd.Parameters.Add(new SqlParameter("@Password", u.Password));
            if (u.UserName != null) 
                cmd.Parameters.Add(new SqlParameter("@UserName", u.UserName));            
            if (u.Role != -1) 
                cmd.Parameters.Add(new SqlParameter("@Role", u.Role));
            if (u.Module != -1) 
                cmd.Parameters.Add(new SqlParameter("@Module", u.Module));
            int i = cmd.ExecuteNonQuery();
            con.Close();
            try {
                if (i > 0) return true;
                else return false;
                
            }catch
            {
            return false;
            }
        
        }
    }
    public static bool DelUser(int id)
    {
        using (SqlConnection con = new SqlConnection(constr))
        {
            con.Open();
            string sql = "delete from SysUser where UserId=@id";
            SqlCommand cmd = new SqlCommand(sql,con);
            cmd.Parameters.Add(new SqlParameter ("@id",id));
            int i = cmd.ExecuteNonQuery();
            con.Close();
            try
            {
                if (i > 0)
                    return true;
                else return false;
            }
            catch (Exception e)
            {
                return false;
            }

        }
    }
    public static bool AddUser(SysUser u)
    {
        using (SqlConnection con=new SqlConnection (constr))
        {
            con.Open();
            string sql = "insert into SysUser (UserName,Password,Role,Module)";
            sql += " values (@UserName,@Password,@Role,@Module)";
            SqlCommand cmd = new SqlCommand(sql,con);
            cmd.Parameters.Add(new SqlParameter ("@UserName",u.UserName));
            cmd.Parameters.Add(new SqlParameter("@Password", u.Password));
            cmd.Parameters.Add(new SqlParameter("@Role", u.Role));
            cmd.Parameters.Add(new SqlParameter("@Module", u.Module));
            int i = cmd.ExecuteNonQuery();
            con.Close();
            try
            {
                if (i > 0)
                    return true;
                else
                    return false;
            }
            catch (Exception e)
            {
                return false;
            }
        }
    }
    
   
}