Example #1
0
    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            if (!(Request.Cookies["NewsVendorCookie"] != null && new Bitmask().checkAdmin(int.Parse(Request.Cookies.Get("NewsVendorCookie")["role"]))) ||
                string.IsNullOrEmpty(Request.Params["id"]))
            {
                Response.Redirect("~/Index.aspx");
            }
            else
            {
                int    id    = int.Parse(Request.Params["id"].ToString());
                string query = "SELECT * FROM Users WHERE Id = @id;";

                SqlConnection con = new SqlConnection(System.Configuration.ConfigurationManager.ConnectionStrings["MyDb"].ConnectionString);
                con.Open();

                try
                {
                    SqlCommand com = new SqlCommand(query, con);
                    com.Parameters.AddWithValue("id", id);
                    SqlDataReader reader = com.ExecuteReader();

                    reader.Read();
                    UserEmail.Text = "Edit role for " + reader["Email"].ToString();
                    int role = int.Parse(reader["role"].ToString());

                    Bitmask bitmask = new Bitmask();

                    if (bitmask.checkBasic(role))
                    {
                        BasicUser.SelectedValue = "1";
                    }
                    else
                    {
                        BasicUser.SelectedValue = "0";
                    }

                    if (bitmask.checkEditor(role))
                    {
                        EditorUser.SelectedValue = "1";
                    }
                    else
                    {
                        EditorUser.SelectedValue = "0";
                    }

                    if (bitmask.checkAdmin(role))
                    {
                        AdminUser.SelectedValue = "1";
                    }
                    else
                    {
                        AdminUser.SelectedValue = "0";
                    }
                }
                catch (Exception ex)
                {
                    EditErrorLabel.Text = ex.Message;
                }
                finally
                {
                    con.Close();
                }
            }
        }
    }