bianji_zhuti.aspx.cs

简易BBS源码,包括系统管理、论坛管理、用户可以看懂源码

using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
namespace free.bbs
{
	/// <summary>
	/// Summary description for bianji_zhuti.
	/// </summary>
	public partial class bianji_zhuti : System.Web.UI.Page
	{
		protected System.Data.SqlClient.SqlConnection myconn;
		protected System.Data.SqlClient.SqlCommand mycomm;
	    SqlDataReader myread;

		void databind()
		{
			myconn=new SqlConnection(Session["str_connection"].ToString());
			myconn.Open();
			try
			{
				
				mycomm=new SqlCommand("select zhuti,neirong from posts where (postid="+Request.Params["post_id"]+" and yonghuming='"+Request.Cookies["free_huiyuan"].Value.ToString()+"')",myconn);
				myread=mycomm.ExecuteReader();
				try
				{
					myread.Read();
					TextBox1.Text=htmldecode(myread["zhuti"].ToString().Trim());
					TextBox2.Text=htmldecode(myread["neirong"].ToString().Trim());
					myread.Close();
				
				}
				catch
				{
					myread.Close();
					Response.Write("<script>alert('你无权编辑该主题')</script>");
					Response.Write("<script>window.close()</script>");
					
				}
			}
			catch
			{
				Response.Write("<script>alert('你无权编辑该主题')</script>");
				Response.Write("<script>window.close()</script>");

				
			}
			
			myconn.Close();
		}
		protected void Page_Load(object sender, System.EventArgs e)
		{
			
		}

		#region Web Form Designer generated code
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: This call is required by the ASP.NET Web Form Designer.
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// Required method for Designer support - do not modify
		/// the contents of this method with the code editor.
		/// </summary>
		private void InitializeComponent()
		{    
			databind();

		}
		#endregion

		protected void Button1_Click(object sender, System.EventArgs e)
		{
			DateTime shijian=DateTime.Now;
			string sqlstr="update posts set zhuti=@biaoti,neirong=@neirong, uptime='"+shijian+"',isup='1' where postid="+Convert.ToInt32(Request.Params["post_id"].ToString())+"";
			myconn.Open();
			mycomm=new SqlCommand(sqlstr,myconn);
			mycomm.Parameters.Add(new SqlParameter("@biaoti", SqlDbType.NVarChar, 50));
			mycomm.Parameters["@biaoti"].Value =htmlencode(TextBox1.Text);
			mycomm.Parameters.Add(new SqlParameter("@neirong", SqlDbType.NText));
			mycomm.Parameters["@neirong"].Value =htmlencode(TextBox2.Text);
					
			try 
			{
				mycomm.ExecuteNonQuery();
				Response.Write("<script>alert('编辑成功')</script>");
				Response.Write("<script>window.close()</script>");
			}
			catch{
			Response.Write("<script>alert('编辑失败')</script>");}
			myconn.Close();
		}

		private string htmlencode(string str)
		{
			str=Server.HtmlEncode(str);
			str=str.Replace("\r\n","<br>");
			char ch;
			ch=(char)32;
			str=str.Replace(ch.ToString(),"");
			return str;
		}

		protected void Button2_ServerClick(object sender, System.EventArgs e)
		{
			Response.Write("<script>window.close()</script>");
		
		}
		private string htmldecode(string str)
		{
			str=Server.HtmlDecode(str);
			str=str.Replace("<br>","\r\n");
			//			char ch;
			//			ch=(char)32;
			//			str=str.Replace(ch.ToString(),"");
			return str;
		}
	}
}