cd_confirm.aspx.cs

OA系统,数据库为SQLSever 。net c#

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;

public partial class CompanyDecision_CD_Confirm : System.Web.UI.Page
{
    WebService webService = new WebService();
    protected void Page_Load(object sender, EventArgs e)
    {
        if (Session["UserID"] == null || Session["UserLevel"] == null)
        {
            Response.Redirect("~/Error.aspx");
        }
        if (Session["UserLevel"].ToString() != "总经理")
        {
            Response.Redirect("~/Error.aspx");
        }
        this.tbContent.Style.Add("OverFlow", "hidden");
        string strID = Request.QueryString["cdid"];
        string strSql = "SELECT z_CompanyDecision.CD_ID, z_CompanyDecision.CD_Title, z_CompanyDecision.CD_AddDate, z_CompanyDecision.CD_Content, z_Person.Person_ID, z_CompanyDecision.CD_AddPersonID, z_Person.Person_RealName FROM z_CompanyDecision INNER JOIN z_Person ON z_CompanyDecision.CD_AddPersonID = z_Person.Person_ID where CD_ID='" + strID + "';";
        DataTable table = webService.ExcuteSelect(strSql);
        this.lblID.Text = strID;
        this.lblTitle.Text = table.Rows[0]["CD_Title"].ToString();
        this.lblAuther.Text = table.Rows[0]["Person_RealName"].ToString();
        this.tbContent.Text = table.Rows[0]["CD_Content"].ToString();
        this.lblAddDate.Text = table.Rows[0]["CD_AddDate"].ToString();
    }
    protected void Button1_Click(object sender, EventArgs e)
    {
        string strSql = "Update z_CompanyDecision set CD_IsConfirm='1',CD_ConfirmDate='" + DateTime.Now + "' where CD_ID='"+Request.QueryString["cdid"]+"';";
        webService.ExcuteSql(strSql);
        Response.Redirect("CD_List2.aspx");
    }
    protected void Button2_Click(object sender, EventArgs e)
    {
        string strSql = "Delete from z_CompanyDecision where CD_ID='" + Request.QueryString["cdid"] + "';";
        webService.ExcuteSql(strSql);
        Response.Redirect("CD_List2.aspx");
    }
}