messagebook.ascx.cs

B/S asp.net的C#编的网站

using System;
using System.Data;
using System.Data.SqlClient;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;

public partial class MessageBook : System.Web.UI.UserControl
{
    protected void Page_Load(object sender, EventArgs e)
    {        
        Session.Add("admin", false);        

        if (Session["login_ID"] != null && Session["login_ID"].ToString() != "")
        {
            //string connstr = ConfigurationManager.AppSettings["constr"].ToString();
            //SqlConnection conn = new SqlConnection(connstr);
            WebUser user = new WebUser();
            user.UserID = Session["login_ID"].ToString();
            WebUserManager wum = new WebUserManager();
            user = wum.UserInfoLoad(user);

            if (user.UserPower > 0)
            {
                Session["admin"] = true;                
            }
        }
                
    }


    protected void Button1_Click(object sender, EventArgs e)
    {
        if (Session["login_ID"] == null || Session["login_ID"].ToString() == "")
        {
            Response.Write("<script LANGUAGE='javascript'>alert('发言请先登录！');history.go(-1);</script>");

        }
        else
        {
            Button1.Visible = false;
            Panel2.Visible = true;
        }
    }


    protected void Button2_Click(object sender, EventArgs e)
    {
        string connstr = ConfigurationManager.AppSettings["constr"].ToString();
        SqlConnection conn = new SqlConnection(connstr);

        try
        {           
            conn.Open();

            string name = Session["login_ID"].ToString();

            //查找发言编号
            //string sql_1 = "Select max(MessageID) AS number From [Message]";
            //
            //DataSet ds = new DataSet();
            //SqlDataAdapter sda = new SqlDataAdapter(sql_1, conn);
            //sda.Fill(ds);

            //int number = 0;
            //if (ds.Tables[0].Rows.Count != 0)
            //{
            //    number = Convert.ToInt32(ds.Tables[0].Rows[0][0]) + 1;
            //}

            //执行插入语句
            string sql_2 = "Insert Into [Message] (UserID,Title,Content,Time) Values ('" + name + "','" + Titletxt.Text + "','" + Messagetxt.Text + "','" + DateTime.Now + "')";
            SqlCommand cmd = new SqlCommand(sql_2, conn);

            cmd.ExecuteNonQuery();
        }
        catch (SqlException se1)
        {
            se1.ToString();
        }
        finally
        {
            conn.Close();
        }

        Response.Redirect ("./MessageBook.aspx");
    }
}