orderview.aspx.cs

前台首页：users/index.aspx 后台首页：login.aspx 这是一个有关宠物的电子商务网站 注：后台的“售后服务” 和“数据统计”这两块由于时间原因暂时 没完成。由于技术问

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class users_orderview : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
        Label5.Text = Session["user"].ToString() + "欢迎您" + "（如果您不是" + Session["user"].ToString() + "请退出登录）";
        Label7.Text="以下是你的所有订单";
        GridView1.DataSource = (DataTable)Session["cart"];
        GridView1.DataBind();
    }


    protected void Button1_Click(object sender, EventArgs e)
    {
        SqlConnection con = new SqlConnection("data source=localhost;uid=sa;pwd=;database=Ebusiness");
        con.Open();
        DataTable order_tab = (DataTable)Session["cart"];
        for (int i=0; i < order_tab.Rows.Count; i++)
        {
            SqlCommand objsqlcomm = new SqlCommand();
            objsqlcomm.Connection = con;
            objsqlcomm.CommandType = CommandType.StoredProcedure;
            objsqlcomm.CommandText = "insert_orderlist";
            objsqlcomm.Parameters.Add("@userid", SqlDbType.Int).Value = Session["userid"].ToString();
            objsqlcomm.Parameters.Add("@id", SqlDbType.Int).Value =Int32.Parse(order_tab.Rows[i][1].ToString());
            objsqlcomm.Parameters.Add("@petname", SqlDbType.Char, 20).Value = order_tab.Rows[i][2];
            objsqlcomm.Parameters.Add("@petmoney", SqlDbType.Money).Value = order_tab.Rows[i][3];
            objsqlcomm.Parameters.Add("@count", SqlDbType.Int).Value =Int32.Parse(order_tab.Rows[i][4].ToString());
            objsqlcomm.Parameters.Add("@TotalPrice", SqlDbType.Money).Value = order_tab.Rows[i][5];
            objsqlcomm.Parameters.Add("@ordertime", SqlDbType.DateTime).Value = DateTime.Now.ToString();
            objsqlcomm.ExecuteNonQuery();
            objsqlcomm.Dispose();
            SqlCommand updatecomm = new SqlCommand("update product_info set num=num-@num where id=@id", con);
            updatecomm.Parameters.Add("@id", SqlDbType.Int).Value = Int32.Parse(order_tab.Rows[i][1].ToString());
            updatecomm.Parameters.Add("@num", SqlDbType.Int).Value = Int32.Parse(order_tab.Rows[i][4].ToString());
            updatecomm.ExecuteNonQuery();
            updatecomm.Dispose();
        }
        con.Close();
        ShowMassage("下订单成功，请等待发货！");

    }
    private void ShowMassage(string msg)
    {
        Response.Write("<script>window.alert('" + msg + "')</script>");
    }
}