bbs_info.aspx.cs

OA系统,数据库为SQLSever 。net c#

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;

public partial class BBS_BBS_Info : System.Web.UI.Page
{
    WebService webService = new WebService();
    PagedDataSource objPDS;
    string strSql;
    protected void Page_Load(object sender, EventArgs e)
    {
        if (Session["UserID"] == null || Session["UserLevel"] == null)
        {
            Response.Redirect("~/Error.aspx");
        }
        if (!Page.IsPostBack)
        {
            strSql = "SELECT z_BbsMessage.BM_ID,BM_AddPersonID, z_BbsMessage.BM_Title,z_BbsMessage.BM_Content, z_BbsMessage.BM_AddDate,z_BbsMessage.BM_ModifyDate,z_BbsMessage.BM_Replies, z_Person.Person_UserName FROM z_BbsMessage INNER JOIN z_Person ON z_BbsMessage.BM_AddPersonID = z_Person.Person_ID WHERE z_BbsMessage.BM_ID='" + Request.QueryString["bid"] + "';";
            DataTable table = webService.ExcuteSelect(strSql);
            this.lblTitle.Text = table.Rows[0]["BM_Title"].ToString();
            this.lblAddDate.Text = table.Rows[0]["BM_AddDate"].ToString();
            this.lblAuthor.Text = table.Rows[0]["Person_UserName"].ToString();
            this.TextBox1.Text = table.Rows[0]["BM_Content"].ToString();
            if (table.Rows[0]["BM_ModifyDate"].ToString() != "")
                this.lblModifyDate.Text = "此帖最后于" + table.Rows[0]["BM_ModifyDate"].ToString() + "被楼主修改。";
            if (table.Rows[0]["BM_AddPersonID"].ToString() != Session["UserID"].ToString())
            {
                this.lbtnEdit.Visible = false;
            }
            if (Session["UserLevel"].ToString() != "总经理" && Session["UserLevel"].ToString() != "副总经理")
                this.lbtnDel.Visible = false;
            else
                this.lbtnDel.Visible = true;
        }

        strSql = "SELECT z_Person.Person_UserName, z_Reply.Reply_AddDate, z_Reply.Reply_ModifyDate, z_Reply.Reply_Content, z_Reply.Reply_ID, z_Reply.BBS_ID, z_BbsMessage.BM_ID, z_BbsMessage.BM_Title FROM z_Reply INNER JOIN z_Person ON z_Reply.Reply_AddPersonID = z_Person.Person_ID INNER JOIN z_BbsMessage ON z_Reply.BBS_ID = z_BbsMessage.BM_ID WHERE (z_BbsMessage.BM_ID = '" + Request.QueryString["bid"] + "')";
        DataTable dtTable = webService.ExcuteSelect(strSql);
        DataColumn column = new DataColumn("Modify");
        dtTable.Columns.Add(column);
        DataColumn column2 = new DataColumn("Num");
        dtTable.Columns.Add(column2);
        int i = 1;
        foreach (DataRow row in dtTable.Rows)
        {
            if (row["Reply_ModifyDate"].ToString() != "")
            {
                row["Modify"] = "此帖最后于" + row["Reply_ModifyDate"].ToString() + "被作者修改。";
            }
            else
                row["Modify"] = "";
            row["Num"] = i.ToString();
            i++;
        }
        objPDS = new PagedDataSource();
        objPDS.DataSource = dtTable.DefaultView;
        objPDS.AllowPaging = true;
        objPDS.PageSize = 10;
        int curPage;
        if (Request.QueryString["Page"] != null)
        {
            curPage = Int32.Parse(Request.QueryString["Page"]);
        }
        else
            curPage = 1;
        objPDS.CurrentPageIndex = curPage - 1;
        this.lblPageNum.Text = curPage.ToString();
        this.lblTotalPage.Text = objPDS.PageCount.ToString();

        if (!objPDS.IsFirstPage)
        {
            linkPre.NavigateUrl = Request.CurrentExecutionFilePath + "?Page=" + Convert.ToString(curPage - 1)+"&&bid="+Request.QueryString["bid"];
        }
        if (!objPDS.IsLastPage)
        {
            linkNext.NavigateUrl = Request.CurrentExecutionFilePath + "?Page=" + Convert.ToString(curPage + 1) + "&&bid=" + Request.QueryString["bid"];
        }
        linkFirstPage.NavigateUrl = Request.CurrentExecutionFilePath + "?Page=1" + "&&bid=" + Request.QueryString["bid"];
        linkEndPage.NavigateUrl = Request.CurrentExecutionFilePath + "?Page=" + objPDS.PageCount.ToString() + "&&bid=" + Request.QueryString["bid"];

        this.DataList1.DataSource = objPDS;
        this.DataList1.DataBind();
        foreach (DataListItem item in this.DataList1.Items)//逐行检查每个DataList项
        {
            LinkButton edit = (LinkButton)item.FindControl("lbtnEditReply");//得到其中的编辑按钮
            Label lblName = (Label)item.FindControl("lblAuthor");//得到其中的显示用户名的Label控件
            strSql = "Select Person_ID from z_Person where Person_UserName='" + lblName.Text + "';";//根据用户名找到发表该回复的用户的ID
            DataTable table1 = webService.ExcuteSelect(strSql);
            if (table1.Rows[0]["Person_ID"].ToString() != Session["UserID"].ToString())//比较当前用户是否是回复撰写人
            {
                edit.Visible = false;
            }
            else
            {
                edit.Visible = true;
            }
            LinkButton del = (LinkButton)item.FindControl("lbtnDelReply");//得到其中的删除按钮
            if (Session["UserLevel"].ToString() != "总经理" && Session["UserLevel"].ToString() != "副总经理")//判断是否是管理层
            {   
                del.Visible = false;
            }
            else
            {
                del.Visible = true;
            }
        }
    }
    protected void lbtnGoPage_Click(object sender, EventArgs e)
    {
        int pageIndex = Int32.Parse(this.tbPageNum.Text);
        if (pageIndex <= objPDS.PageCount && pageIndex > 0)
        {
            this.lblMsg.Text = "";
            if (Request.QueryString["type"] != null)
            {
                Response.Redirect("BBS_Info.aspx?Page=" + pageIndex+"&&bid="+Request.QueryString["bid"]);
            }
            else
                Response.Redirect("BBS_Info.aspx?Page=" + pageIndex+"&&bid="+Request.QueryString["bid"]);
        }
        else
        {
            this.lblMsg.Text = "输入页数错误";
        }
    }
    protected void LinkButton1_Click(object sender, EventArgs e)
    {
        Response.Redirect("BBS_AddReply.aspx?bid=" + Request.QueryString["bid"]);
    }
    protected void LinkButton2_Click(object sender, EventArgs e)
    {
        Response.Redirect("BBS_List.aspx");
    }
    protected void lbtnDel_Click(object sender, EventArgs e)
    {
        if (Session["UserLevel"].ToString() == "总经理" || Session["UserID"].ToString() == "副总经理")
        {
            strSql = "Delete from z_BbsMessage where BM_ID='" + Request.QueryString["bid"] + "';";
            webService.ExcuteSql(strSql);
            strSql = "Delete from z_Reply where BBS_ID='" + Request.QueryString["bid"] + "';";
            webService.ExcuteSql(strSql);
            Response.Redirect("BBS_List.aspx");
        }
    }
    protected void lbtnEdit_Click(object sender, EventArgs e)
    {
        Response.Redirect("BBS_Edit.aspx?bid="+Request.QueryString["bid"]);
    }
    protected void lbtnDelReply_Command(object sender, CommandEventArgs e)
    {
        if (Session["UserLevel"].ToString() == "总经理" || Session["UserID"].ToString() == "副总经理")
        {
            strSql = "Update z_Reply set Reply_Content='该楼已被管理员删除!' where Reply_ID='" + e.CommandArgument + "';";
            webService.ExcuteSql(strSql);
            Response.Redirect("BBS_Info.aspx?bid="+Request.QueryString["bid"]);
        }
    }
    protected void lbtnEditReply_Command(object sender, CommandEventArgs e)
    {
        Response.Redirect("BBS_EditReply.aspx?rid=" + e.CommandArgument + "&&bid=" + Request.QueryString["bid"]);
    }
}