cd_add.aspx.cs

OA系统,数据库为SQLSever 。net c#

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;

public partial class CompanyDecision_CD_Add : System.Web.UI.Page
{
    WebService webService = new WebService();
    protected void Page_Load(object sender, EventArgs e)
    {
        if (Session["UserID"] == null || Session["UserLevel"] == null)
        {
            Response.Redirect("~/Error.aspx");
        }
        if (Session["UserLevel"].ToString() != "总经理" && Session["UserLevel"].ToString() != "副总经理")
        {
            Response.Redirect("~/Error.aspx");
        }
        if (Session["UserLevel"].ToString() != "总经理")
        {
            this.CheckBox1.Visible = false;
            this.lblMsg.Text = "您所撰写的新决策不能立即实行，将等待总经理的审核！";
        }
    }
    protected void btnSubmit_Click(object sender, EventArgs e)
    {
        string strSql;
        if (this.tbTitle.Text == "" || this.tbContent.Text == "")
            this.lblMsg.Text = "请填写完整的信息！";
        else
        {
            string strTitle = this.tbTitle.Text;
            string strContent = this.tbContent.Text;
            if (this.CheckBox1.Checked)
            {
                strSql = "Insert into z_CompanyDecision(CD_Title,CD_Content,CD_AddDate,CD_IsConfirm,CD_ConfirmDate,CD_AddPersonID) values ('" + strTitle + "','" + strContent + "','" + DateTime.Now + "','1','" + DateTime.Now + "','" + Session["UserID"].ToString() + "');";
            }
            else
                strSql = "Insert into z_CompanyDecision(CD_Title,CD_Content,CD_AddDate,CD_IsConfirm,CD_AddPersonID) values ('" + strTitle + "','" + strContent + "','" + DateTime.Now + "','0','" + Session["UserID"].ToString() + "');";
            webService.ExcuteSql(strSql);
            Response.Redirect("CD_List.aspx");
        }
    }
    protected void btnCancel_Click(object sender, EventArgs e)
    {
        Response.Redirect("CD_List.aspx");
    }
}