addproduct.aspx.cs

一个简单的信息系统 系统用户管理 编辑系统用户 新增系统用户

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class addproduct : System.Web.UI.Page
{
    SqlConnection cn;
    protected void Page_Load(object sender, EventArgs e)
    {
        if (Session["branch"].ToString() == "0" || Session["branch"].ToString() == "1")
        {
           
        }
        else
        {
            Response.Write("您不是合法用户，请登入后再操作，<a href='default.aspx'>返回登录</a>");
            Page.Response.End();
        }
        string strconn = ConfigurationSettings.AppSettings["ConnectionString"];
        cn = new SqlConnection(strconn);
    }
    private void Cv_id_ServerValidate(object source, System.Web.UI.WebControls.ServerValidateEventArgs args)
    {
        cn.Open();
        SqlCommand cm = new SqlCommand("select * from product where product_id=@product_id", cn);
        cm.Parameters.Add("@product_id", SqlDbType.VarChar, 20);
        cm.Parameters["@product_id"].Value = id.Text;
        SqlDataReader dr = cm.ExecuteReader();
        if (dr.Read())
        {
            args.IsValid = false;
        }
        else
        {
            args.IsValid = true;
        }
        cn.Close();
    }
    protected void Btn_ok_Click(object sender, EventArgs e)
    {
        if (Page.IsValid)
        {
            SqlCommand cm = new SqlCommand("Addproduct", cn);

            cm.CommandType = CommandType.StoredProcedure;
            cm.Parameters.Add(new SqlParameter("@Product_id", SqlDbType.VarChar, 20));
            cm.Parameters.Add(new SqlParameter("@Product_name", SqlDbType.VarChar, 50));
            cm.Parameters.Add(new SqlParameter("@spec", SqlDbType.VarChar, 20));
            cm.Parameters.Add(new SqlParameter("@price", SqlDbType.Money,8));
            cm.Parameters.Add(new SqlParameter("@descnbe", SqlDbType.Text, 16));

            cm.Parameters["@Product_id"].Value = id.Text;
            cm.Parameters["@Product_name"].Value = name.Text;
            cm.Parameters["@spec"].Value = spec.Text;
            cm.Parameters["@price"].Value = price.Text;
            cm.Parameters["@descnbe"].Value = descnbe.Text;

            cm.Connection.Open();
            try
            {
                cm.ExecuteNonQuery();
                Response.Redirect("editproduct.aspx");

            }
            catch (SqlException)
            {
                Lbl_note.Text = "添加失败";
                Lbl_note.Style["color"] = "red";
            }
            cm.Connection.Close();
        }
    }
    protected void Btn_cancel_Click(object sender, EventArgs e)
    {
        Page.Response.Redirect("addproduct.aspx");
    }
}