}// 新建SqlDataReader并read数据

    public static void sqlCmdInsertDeleteUpdate(string strSqlCmd)
    {
        try
        {
            SqlConnection sqlCnn = DatabaseOperating.creatDBConnect();
            SqlCommand    sqlCmd = new SqlCommand(strSqlCmd, sqlCnn);
            sqlCmd.ExecuteNonQuery();
            sqlCnn.Close();
        }
        catch { }

        return;
    }// 数据库增,删,改命令
    protected void btnModify_Click(object sender, EventArgs e)
    {
        sqlCnn = DatabaseOperating.creatDBConnect();
        string strResult;


        if (txtUserOldPassword.Text.ToString().Equals(""))
        {
            lblErrorMessage.Text = "请输入旧密码。";
        }

        else
        {
            try
            {
                string     strSqlCmdLoginCheck = "select count(*) from users where userName = '******'and userPassword = '******'";
                SqlCommand sqlCmd = new SqlCommand(strSqlCmdLoginCheck, sqlCnn);

                strResult = sqlCmd.ExecuteScalar().ToString();

                if (strResult.Equals("1"))
                {
                    if (txtUserNewPassword.Text.Equals("") || txtUserNewPasswordConfig.Text.Equals(""))
                    {
                        lblErrorMessage.Text = "新密码和新密码确认不能为空。";
                    }

                    else if (!txtUserNewPassword.Text.Equals(txtUserNewPasswordConfig.Text))
                    {
                        lblErrorMessage.Text = "两次输入的新密码不一致。";
                    }

                    else
                    {
                        string strSqlCmd = "update users set userPassword = '******' ,userZone = '" + DrpDwnLstZone.SelectedItem.Text + " ' where userName = '******'";
                        DatabaseOperating.sqlCmdInsertDeleteUpdate(strSqlCmd);
                        Response.Write("<script language=javascript>alert('恭喜您,修改成功!')</script>");
                        Response.Write("<script language=javascript>window.location.href='Login_Register_Done.aspx'</script>");
                    }
                }
                else
                {
                    lblErrorMessage.Text = "旧密码错误,请重新输入。";
                }
            }
            catch
            {}
        }
    }
Example #3
0
    protected void btnLinkModifyAddSubmit_Click(object sender, EventArgs e)
    {
        if (btnLinkModifyAddSubmit.Text.Equals("修改"))
        {
            strSqlCmd = "update links set linkName = '" + txtLinkName.Text + "', linkURL = '" + txtLinkURL.Text + "', linkContent = '" + txtLinkContent.Text + "' where linkID = '" + lblLinkID.Text + "'";
            DatabaseOperating.sqlCmdInsertDeleteUpdate(strSqlCmd);
            lblLinkID.Text      = "";
            txtLinkURL.Text     = "http://";
            txtLinkName.Text    = "";
            txtLinkContent.Text = "";
            this.Page_Load(sender, e);
        }
        else
        {
            SqlConnection sqlCnn = DatabaseOperating.creatDBConnect();
            SqlCommand    sqlCmd = new SqlCommand("linkInsert", sqlCnn);
            sqlCmd.CommandType = CommandType.StoredProcedure;

            sqlCmd.Parameters.Add("@linkURl", SqlDbType.VarChar, 200);
            sqlCmd.Parameters["@linkURL"].Value = txtLinkURL.Text;
            sqlCmd.Parameters.Add("@linkName", SqlDbType.VarChar, 20);
            sqlCmd.Parameters["@linkName"].Value = txtLinkName.Text;
            sqlCmd.Parameters.Add("@linkContent", SqlDbType.VarChar, 200);
            sqlCmd.Parameters["@linkContent"].Value = txtLinkContent.Text;

            sqlCmd.ExecuteNonQuery();

            sqlCnn.Close();



            //strSqlCmd = "insert into links (linkURL,linkName,linkContent) values ('" + txtLinkURL.Text + "','" + txtLinkName.Text + "','" + txtLinkContent.Text + "')";
            //DatabaseOperating.sqlCmdInsertDeleteUpdate(strSqlCmd);



            Response.Write("<script>alert('添加成功')</script>");
            lblLinkID.Text      = "";
            txtLinkURL.Text     = "http://";
            txtLinkName.Text    = "";
            txtLinkContent.Text = "";
            this.Page_Load(sender, e);
        }
        Response.Write("<script>alert('操作成功')</script>");
    }
    }// 创建数据库连接

    public static DataSet fillDataSet(string strSqlCmd, string strTblName)
    {
        try
        {
            SqlConnection  sqlCnn = DatabaseOperating.creatDBConnect();
            SqlDataAdapter sqlDA  = new SqlDataAdapter(strSqlCmd, sqlCnn);
            DataSet        DS     = new DataSet();
            sqlDA.Fill(DS, strTblName);
            sqlCnn.Close();
            return(DS);
        }

        catch
        {
        }


        return(null);
    }// 新建DataSet并填充
    protected void btnConsultSubmit_Click(object sender, EventArgs e)
    {
        string strConsultSort;
        string strConsultPrivate;


        if (radBtnConsultSortDye.Checked)
        {
            strConsultSort = "染料";
        }
        else
        {
            strConsultSort = "肥料";
        }

        if (radBtnConsultPrivate0.Checked)
        {
            strConsultPrivate = "0";
        }
        else
        {
            strConsultPrivate = "1";
        }

        sqlCnn    = DatabaseOperating.creatDBConnect();
        strSqlCmd = "insert into consult(consultTitle,consultSort,consultPrivate,consultDate,consultContent,consultAnswered,userID) values('"
                    + txtConsultTitle.Text + "','"
                    + strConsultSort + "','"
                    + strConsultPrivate + "','"
                    + DateTime.Today.ToShortDateString().ToString() + "','"
                    + txtConsultContent.Text + "','"
                    + "0" + "','"
                    + Session["userID"].ToString() + "')";


        sqlCmd = new SqlCommand(strSqlCmd, sqlCnn);
        sqlCmd.ExecuteNonQuery();
        Response.Write("<script language=javascript>alert('提问成功!')</script>");
        sqlCnn.Close();
    }
    }// 新建DataSet并填充

    public static SqlDataReader sqlDataReaderRead(string strSqlCmd)
    {
        try
        {
            SqlConnection sqlCnn = DatabaseOperating.creatDBConnect();
            SqlCommand    sqlCmd = new SqlCommand(strSqlCmd, sqlCnn);
            SqlDataReader sqlDR  = sqlCmd.ExecuteReader();

            if (sqlDR.Read())                                                      // 注意这三句的顺序。“.Read()”的存在依赖于数据库连接。
            {
                return(sqlDR);
            }
            else
            {
                return(null);
            }

            sqlCnn.Close();
        }

        catch { }

        return(null);
    }// 新建SqlDataReader并read数据
    protected void btnRegister_Click(object sender, EventArgs e)
    {
        SqlConnection sqlCnn = DatabaseOperating.creatDBConnect();

        Regex regUserName     = new Regex(@"^\w+$");                                                     // 只能输入由数字、26个英文字母或者下划线组成的字符串
        Regex regUserpassword = new Regex(@"^[a-zA-Z]\w{5,17}$");                                        // 以字母开头,长度在6~18之间,只能包含字符、数字和下划线
        Regex regMail         = new Regex(@"\w+([-+.]\w+)*@\w+([-.]\w+)*\.\w+([-.]\w+)*");               // 验证Email地址格式

        strSqlCmd = "select count(*) from users where userName = '******'"; // 验证是否已存在此用户
        sqlCmd    = new SqlCommand(strSqlCmd, sqlCnn);
        string strResultUserNameCheck = sqlCmd.ExecuteScalar().ToString();


        strSqlCmd = "select count(*) from users where userEmail = '" + txtUserEmail.Text.ToString() + "'";     // 验证是否已有用户使用此邮箱
        sqlCmd    = new SqlCommand(strSqlCmd, sqlCnn);
        string strResultUserEmailCheck = sqlCmd.ExecuteScalar().ToString();


        #region 验证注册信息
        if (txtUserName.Text.Equals(""))
        {
            lblErrorMessage.Text = "用户名不能为空。";
        }


        else if (!regUserName.IsMatch(txtUserName.Text.ToString()))
        {
            lblErrorMessage.Text = "用户名格式不正确。只能输入由数字、26个英文字母或者下划线组成的字符串";
        }
        else if (strResultUserNameCheck == "1")
        {
            lblErrorMessage.Text = "此用户名已被注册,请您另择其他。";
        }


        else if (txtUserPassword.Text.Equals(""))
        {
            lblErrorMessage.Text = "密码不能为空。";
        }
        else if (!regUserpassword.IsMatch(txtUserPassword.Text.ToString()))
        {
            lblErrorMessage.Text = "密码格式不正确。只能以字母开头,长度在6~18之间,只能包含字符、数字和下划线";
        }
        else if (txtUserPasswordConfig.Text.Equals(""))
        {
            lblErrorMessage.Text = "密码确认不能为空。";
        }

        else if (!txtUserPassword.Text.ToString().Equals(txtUserPasswordConfig.Text.ToString()))
        {
            lblErrorMessage.Text = "两次输入的密码不一致,请重新输入。";
        }

        else if (txtUserEmail.Text.Equals(""))
        {
            lblErrorMessage.Text = "邮件地址不能为空。";
        }

        else if (!regMail.IsMatch(txtUserEmail.Text.ToString()))
        {
            lblErrorMessage.Text = "邮件格式不正确。";
        }


        else if (strResultUserEmailCheck == "1")
        {
            lblErrorMessage.Text = "此邮箱已被注册,请您另择其他。";
        }

        #endregion

        #region 添加新用户


        else
        {
            strSqlCmd = "insert into users(userName, userPassword, userZone, userEmail, userRegisterDate, userRight) values( "
                        + "'" + txtUserName.Text.ToString() + "'"
                        + ","
                        + "'" + txtUserPassword.Text.ToString() + "'"
                        + ","
                        + "'" + DrpDwnLstZone.SelectedItem.Text.ToString() + "'"
                        + ","
                        + "'" + txtUserEmail.Text.ToString() + "'"
                        + ","
                        + "'" + DateTime.Today.ToShortDateString().ToString() + "'"
                        + ","
                        + "'" + "0" + "'"
                        + ")";

            DatabaseOperating.sqlCmdInsertDeleteUpdate(strSqlCmd);

            string strUserID;
            strSqlCmd = "select userID from users where userName = '******'";
            sqlDR     = DatabaseOperating.sqlDataReaderRead(strSqlCmd);
            strUserID = sqlDR["userID"].ToString();

            Session["userName"]  = txtUserName.Text;
            Session["userRight"] = "0";
            Session["userID"]    = strUserID;
            Response.Write(" <script   language=\"javascript\"> alert(\"注册成功\");window.location.href='Login_Register_Done.aspx'</script> ");
        }

        #endregion

        sqlCnn.Close();
    }