order_info.aspx.cs

OA系统,数据库为SQLSever 。net c#

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;

public partial class OrderInfo_Order_Info : System.Web.UI.Page
{
    WebService webService = new WebService();
    protected void Page_Load(object sender, EventArgs e)
    {
        if (Session["UserID"] == null || Session["UserLevel"] == null)
        {
            Response.Redirect("~/Error.aspx");
        }
        string strSql = "SELECT z_Person.Person_RealName,z_Order.Dept_ID, z_Order.Order_ID,z_Order.Product_Price, z_Product.Product_Name, z_Client.Client_CompanyName, z_Order.Order_Price, z_Order.Order_AddDate, z_Order.Product_Num FROM z_Client INNER JOIN z_Order ON z_Client.Client_ID = z_Order.Client_ID INNER JOIN z_Person ON z_Order.Order_AddPersonID = z_Person.Person_ID INNER JOIN z_Product ON z_Order.Product_ID = z_Product.Product_ID WHERE z_Order.Order_ID='" + Request.QueryString["oid"] + "';";
        DataTable table = webService.ExcuteSelect(strSql);
        this.lblAddPersonName.Text = table.Rows[0]["Person_RealName"].ToString();
        this.lblCompanyName.Text = table.Rows[0]["Client_CompanyName"].ToString();
        this.lblNum.Text = table.Rows[0]["Product_Num"].ToString();
        this.lblOrderPrice.Text = table.Rows[0]["Order_Price"].ToString();
        this.lblProductname.Text = table.Rows[0]["Product_Name"].ToString();
        this.lblProductPrice.Text = table.Rows[0]["Product_Price"].ToString();
        if (Session["UserLevel"].ToString() == "总经理" || Session["UserLevel"].ToString() == "副总经理")
        {
            this.HyperLink1.NavigateUrl = "Order_ListAll.aspx?did=" + table.Rows[0]["Dept_ID"].ToString();
        }
        else
        {
            strSql = "Select Person_DeptID from z_Person where Person_ID='" + Session["UserID"].ToString() + "';";
            DataTable dtTable = webService.ExcuteSelect(strSql);
            if (dtTable.Rows[0]["Person_DeptID"].ToString() == table.Rows[0]["Dept_ID"].ToString())
            {
                this.HyperLink1.NavigateUrl = "Order_List.aspx";
            }
            else
            {
                Response.Redirect("~/Error.aspx");
            }
        }
    }
}