admin_check.aspx.cs

非常完整的新闻发布系统

using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient ;
using System.Configuration;
namespace WebNews.admin
{
	/// <summary>
	/// admin_check 的摘要说明。
	/// </summary>
	public class admin_check : System.Web.UI.Page
	{
		protected System.Data.SqlClient.SqlConnection SqlConnection1;		//添加数据库的操作对象
		protected System.Data.SqlClient.SqlDataAdapter SqlDataAdapter1;
		protected System.Data.DataSet DataSet1;
		protected System.Data.SqlClient.SqlCommand SqlCommand1;
		protected System.Data.SqlClient.SqlDataReader SqlDataReader1;

		protected System.Web.UI.WebControls.Label myLabel;
		protected System.Web.UI.WebControls.TextBox keyword;
		protected System.Web.UI.WebControls.DropDownList search;
		protected System.Web.UI.WebControls.LinkButton LinkButton1;
		protected System.Web.UI.WebControls.RequiredFieldValidator RequiredFieldValidator1;
		protected System.Web.UI.WebControls.DataGrid MyDataGrid;
		protected System.Web.UI.WebControls.Label lblCurrentIndex;
		protected System.Web.UI.WebControls.LinkButton btnFirst;
		protected System.Web.UI.WebControls.LinkButton LinkButton2;
		protected System.Web.UI.WebControls.LinkButton Linkbutton3;
		protected System.Web.UI.WebControls.LinkButton Linkbutton4;
		protected System.Web.UI.WebControls.Label lblPageCount;
	
		private void Page_Load(object sender, System.EventArgs e)
		{
			// 在此处放置用户代码以初始化页面
			if(!Page.IsPostBack)
			{
				string username;
				username=(string)Session["username"];
				if(username.Trim()!="")
				{
					getArticle();
				}
				else Page.Visible=false;
			}
		}		
		
		private void getArticle()						//取得Article数据
		{
			SqlConnection1 = new SqlConnection(ConfigurationSettings.AppSettings["dsn"]);//取连接字符串,建立连接
			SqlDataAdapter1 = new SqlDataAdapter();
			string g=(string)Session["userclass"];				
			if(g.Trim()=="系统管理员")	
			{
				SqlDataAdapter1.SelectCommand=new SqlCommand("SELECT * FROM db_Article WHERE (checkup!=@checkup)  ORDER BY dateandtime DESC ",SqlConnection1);
				SqlDataAdapter1.SelectCommand.Parameters.Add("@checkup",SqlDbType.Int);	
				SqlDataAdapter1.SelectCommand.Parameters["@checkup"].Value = 1;
			}
			else 
			{
				SqlDataAdapter1.SelectCommand=new SqlCommand("SELECT * FROM db_Article WHERE (classname = @classname) ORDER BY dateandtime DESC",SqlConnection1);
				SqlDataAdapter1.SelectCommand.Parameters.Add("@classname",SqlDbType.Char,40);
				SqlDataAdapter1.SelectCommand.Parameters["@classname"].Value=(string)Session["classname"];		
			}
			DataSet1=new DataSet();		
			try
			{
				SqlDataAdapter1.Fill(DataSet1,"Article");
			}
			catch (SqlException e1)
			{
				myLabel.Text ="数据库操作错误："+e1.Message;				
			}
			MyDataGrid.DataSource=DataSet1;
			MyDataGrid.DataBind();			
			lblCurrentIndex.Text="第"+((Int32)MyDataGrid.CurrentPageIndex+1)+"页";
			lblPageCount.Text="/共"+MyDataGrid.PageCount+"页";			
		}
	
		public	void PagerButtonClick(Object sender, EventArgs e)
		{
			//获得LinkButton的参数值
			string arg = ((LinkButton)sender).CommandArgument;
			switch(arg)
			{
				case ("next"):
					if (MyDataGrid.CurrentPageIndex < (MyDataGrid.PageCount - 1))
						MyDataGrid.CurrentPageIndex ++;
					break;
				case ("prev"):
					if (MyDataGrid.CurrentPageIndex > 0)
						MyDataGrid.CurrentPageIndex --;
					break;
				case ("last"):
					MyDataGrid.CurrentPageIndex = (MyDataGrid.PageCount - 1);
					break;
				case("first"):
					MyDataGrid.CurrentPageIndex =0;
					break;
			}
			getArticle();		
		}

		#region Web Form Designer generated code
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN：该调用是 ASP.NET Web 窗体设计器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 设计器支持所需的方法 - 不要使用代码编辑器修改
		/// 此方法的内容。
		/// </summary>
		private void InitializeComponent()
		{    
			this.LinkButton1.Click += new System.EventHandler(this.LinkButton1_Click);
			this.MyDataGrid.ItemCommand += new System.Web.UI.WebControls.DataGridCommandEventHandler(this.MyDataGrid_ItemCommand);
			this.MyDataGrid.DeleteCommand += new System.Web.UI.WebControls.DataGridCommandEventHandler(this.MyDataGrid_DeleteCommand);
			this.Load += new System.EventHandler(this.Page_Load);

		}
		#endregion
		
		public void MyDataGrid_ItemCommand(object source, System.Web.UI.WebControls.DataGridCommandEventArgs e)
		{
			if(e.CommandName=="pass")
			{
				string a=(string)Session["userclass"];
				if(a.Trim()=="系统管理员" || (int)Session["chknews"]==1)
				{
					object d=this.MyDataGrid.DataKeys[(Int32)e.Item.ItemIndex] ;
					//通过审核
					SqlConnection1 = new SqlConnection(ConfigurationSettings.AppSettings["dsn"]);
					SqlCommand1=new SqlCommand("sp_passArticle",SqlConnection1); 
					SqlCommand1.CommandType=CommandType.StoredProcedure;
					SqlCommand1.Parameters.Add(new SqlParameter("@articleid",SqlDbType.BigInt));
					SqlCommand1.Parameters["@articleid"].Value = MyDataGrid.DataKeys[e.Item.ItemIndex];
					try
					{
						SqlConnection1.Open();
						int i=SqlCommand1.ExecuteNonQuery();
						if(i>0)
						{
							myLabel.Text="通过审核";
						}						
					}
					catch (SqlException e1)
					{
						myLabel.Text ="数据库操作错误："+e1.Message;
					}
					finally
					{
						SqlConnection1.Close();			
					}				
					getArticle();
					//增加管理员发表文章数 
					SqlCommand1=new SqlCommand("sp_addNum",SqlConnection1); 
					SqlCommand1.CommandType=CommandType.StoredProcedure;
					SqlCommand1.Parameters.Add(new SqlParameter("@username",SqlDbType.Char,200));
					SqlCommand1.Parameters["@username"].Value = (string)e.Item.Cells[3].Text.Trim(); //取得管理员名
					try
					{
						SqlConnection1.Open();
						int i=SqlCommand1.ExecuteNonQuery();
						if(i>0)
						{
							myLabel.Text="增加管理员发表文章数成功";
						}						
					}
					catch (SqlException e1)
					{
						myLabel.Text ="数据库操作错误："+e1.Message;
					}
					finally
					{
						SqlConnection1.Close();			
					}	
					//增加分类文章数
					string clum=(string)e.Item.Cells[1].Text;	  //取得分类名
					SqlCommand1=new SqlCommand("sp_addClassNum",SqlConnection1); 
					SqlCommand1.CommandType=CommandType.StoredProcedure;
					SqlCommand1.Parameters.Add(new SqlParameter("@className",SqlDbType.Char,200));
					SqlCommand1.Parameters["@className"].Value = (string)e.Item.Cells[1].Text.Trim();
					try
					{
						SqlConnection1.Open();
						int i=SqlCommand1.ExecuteNonQuery();
						if(i>0)
						{
							myLabel.Text="增加分类文章数成功";
						}						
					}
					catch (SqlException e1)
					{
						myLabel.Text ="数据库操作错误："+e1.Message;
					}
					finally
					{
						SqlConnection1.Close();			
					}
				}
				else 
				{
					myLabel.Text="你无权操作";
				}
			}
		}

		public void MyDataGrid_DeleteCommand(object source, System.Web.UI.WebControls.DataGridCommandEventArgs e)
		{
			string c=(string)Session["userclass"];		
			if(c.Trim()=="系统管理员"||(int)Session["chgnews"]==1)
			{
				SqlConnection1 = new SqlConnection(ConfigurationSettings.AppSettings["dsn"]); //建立连接
				SqlCommand1=new SqlCommand("sp_delArticle",SqlConnection1); 
				SqlCommand1.CommandType=CommandType.StoredProcedure;
				SqlCommand1.Parameters.Add(new SqlParameter("@articleid",SqlDbType.BigInt));
				SqlCommand1.Parameters["@articleid"].Value = MyDataGrid.DataKeys[e.Item.ItemIndex];
				try
				{
					SqlConnection1.Open();
					int r=SqlCommand1.ExecuteNonQuery();
					if(r>0)
					{
						myLabel.Text="删除成功！";
							
					}
					else
					{
						myLabel.Text="删除错误！";
					}					
					getArticle();
				}
				catch (SqlException e1)
				{
					myLabel.Text ="数据库操作错误："+e1.Message;
				}
				finally
				{
					SqlConnection1.Close(); 
				}
			}           
		}

		private void LinkButton1_Click(object sender, System.EventArgs e)	//搜索文章
		{
			if(Page.IsValid)
			{
				SqlConnection1 = new SqlConnection(ConfigurationSettings.AppSettings["dsn"]);//取连接字符串,建连接
				SqlDataAdapter1 = new SqlDataAdapter();		
				if(search.SelectedIndex==0)	
				{
					SqlDataAdapter1.SelectCommand=new SqlCommand("sp_searchCkArticleByTitle",SqlConnection1);	 
					SqlDataAdapter1.SelectCommand.CommandType=CommandType.StoredProcedure ;
					SqlDataAdapter1.SelectCommand.Parameters.Add("@title",SqlDbType.NVarChar ,500);
					SqlDataAdapter1.SelectCommand.Parameters["@title"].Value=keyword.Text.Trim() ;					
				}
				else 
				{
					SqlDataAdapter1.SelectCommand=new SqlCommand("sp_searchCkArticleByContent",SqlConnection1);	 
					SqlDataAdapter1.SelectCommand.CommandType=CommandType.StoredProcedure ;
					SqlDataAdapter1.SelectCommand.Parameters.Add("@content",SqlDbType.NText);
					SqlDataAdapter1.SelectCommand.Parameters["@content"].Value=keyword.Text.Trim(); 
				}
				DataSet1=new DataSet();		
				try
				{
					SqlDataAdapter1.Fill(DataSet1,"Article");
				}
				catch (SqlException e1)
				{
					myLabel.Text ="数据库操作错误："+e1.Message;				
				}
				MyDataGrid.DataSource=DataSet1;
				MyDataGrid.DataBind();				
			}
		}

		
	}
}