public bool Handle(int id, string password) { string passwordHash = Hash.FindHash(password); using (MySqlConnection conn = _context.GetConnection()) { conn.Open(); MySqlCommand cmd = new MySqlCommand(string.Format("UPDATE specialists SET password_hash = '{0}' WHERE specialist_id = '{1}'", passwordHash, id), conn); try { cmd.ExecuteNonQuery(); } catch { return(false); } finally { conn.CloseAsync(); } } return(true); }
public bool Handle(CreateSpecialistCommand request) { var model = request.Adapt <MedicalSpecialist>(); string tempHash = Hash.FindHash(model.PasswordHash); model.PasswordHash = tempHash; using (MySqlConnection conn = _context.GetConnection()) { conn.Open(); string query = string.Format("insert into Specialists(last_name, first_name, middle_name, email, password_hash, Health_Facilities_faculty_id) values('{0}', '{1}', '{2}', '{3}', '{4}', '{5}')", model.LastName, model.FirstName, model.MiddleName, model.Email, model.PasswordHash, model.HealthFacilitiesFacultyId); MySqlCommand cmd = new MySqlCommand(query, conn); try { cmd.ExecuteNonQuery(); } catch { return(false); } finally { conn.CloseAsync(); } } return(true); }
public bool Handle(CreateSpecialistCommand request) { var model = request.Adapt <Model.Specialist>(); string tempHash = Hash.FindHash(model.PasswordHash); model.PasswordHash = tempHash; using (MySqlConnection conn = _context.GetConnection()) { conn.Open(); string query = string.Format("INSERT INTO specialists(last_name, first_name, middle_name, " + "email, password_hash, birthday, education, position, " + "admission_date, dismissal_date, wage_rate, " + "Subunits_subunit_id, Units_unit_id, Parlours_parlour_id) VALUES ('{0}', '{1}', '{2}', '{3}', '{4}', '{5}', '{6}', '{7}', '{8}', '{9}', '{10}', '{11}', '{12}', '{13}')", model.LastName, model.FirstName, model.MiddleName, model.Email, model.PasswordHash, model.Birthday.ToString("yyyy-MM-dd HH:mm:ss"), model.Education, model.Position, model.AdmissionDate.ToString("yyyy-MM-dd HH:mm:ss"), model.DismissalDate.ToString("yyyy-MM-dd HH:mm:ss"), model.WageRate.ToString(), model.SubunitId.ToString(), model.UnitId.ToString(), model.ParlourId.ToString()); MySqlCommand cmd = new MySqlCommand(query, conn); try { cmd.ExecuteNonQuery(); } catch { return(false); } finally { conn.CloseAsync(); } } return(true); }
public List <MedicalSpecialist> Handle(string specialistEmail, string specialistPassword) { List <MedicalSpecialist> list = new List <MedicalSpecialist>(); using (MySqlConnection conn = _context.GetConnection()) { conn.Open(); string query = string.Format("select * from Specialists where (email, password_hash) = ('{0}', '{1}')", specialistEmail, Hash.FindHash(specialistPassword)); MySqlCommand cmd = new MySqlCommand(query, conn); try { using (var reader = cmd.ExecuteReader()) { while (reader.Read()) { list.Add(new MedicalSpecialist() { Id = Convert.ToInt32(reader["specialist_id"]), LastName = reader["last_name"].ToString(), FirstName = reader["first_name"].ToString(), MiddleName = reader["middle_name"].ToString(), Email = reader["email"].ToString(), HealthFacilitiesFacultyId = Convert.ToInt32(reader["Health_Facilities_faculty_id"]), }); } } } catch (Exception ex) { return(null); } finally { conn.CloseAsync(); } } return(list); }
public bool Handle() { List <MedicalSpecialist> list = new List <MedicalSpecialist>(); using (MySqlConnection conn = _context.GetConnection()) { conn.Open(); MySqlCommand cmd = new MySqlCommand("select * from Specialists", conn); try { using (var reader = cmd.ExecuteReader()) { while (reader.Read()) { list.Add(new MedicalSpecialist() { Id = Convert.ToInt32(reader["specialist_id"]), LastName = reader["last_name"].ToString(), FirstName = reader["first_name"].ToString(), MiddleName = reader["middle_name"].ToString(), Email = reader["email"].ToString(), PasswordHash = reader["password_hash"].ToString(), HealthFacilitiesFacultyId = Convert.ToInt32(reader["Health_Facilities_faculty_id"]), }); } } } catch { return(false); } finally { conn.CloseAsync(); } } return(WriteToXLS(list) ? true : false); }
public MedicalSpecialist Handle(int specialistId) { List <MedicalSpecialist> list = new List <MedicalSpecialist>(); using (MySqlConnection conn = _context.GetConnection()) { conn.Open(); string query = "select * from Specialists where specialist_id=" + specialistId.ToString(); MySqlCommand cmd = new MySqlCommand(query, conn); try { using (var reader = cmd.ExecuteReader()) { while (reader.Read()) { list.Add(new MedicalSpecialist() { Id = Convert.ToInt32(reader["specialist_id"]), LastName = reader["last_name"].ToString(), FirstName = reader["first_name"].ToString(), MiddleName = reader["middle_name"].ToString(), Email = reader["email"].ToString(), HealthFacilitiesFacultyId = Convert.ToInt32(reader["Health_Facilities_faculty_id"]), }); } } } catch { return(null); } finally { conn.CloseAsync(); } } return(list[0]); }
public bool Handle(int id, string email) { using (MySqlConnection conn = _context.GetConnection()) { conn.Open(); MySqlCommand cmd = new MySqlCommand(string.Format("UPDATE specialists SET email = '{0}' WHERE specialist_id = '{1}'", email, id), conn); try { cmd.ExecuteNonQuery(); } catch { return(false); } finally { conn.CloseAsync(); } } return(true); }
public bool Handle(int specialistId, CreateSpecialistCommand request) { var model = request.Adapt <Model.MedicalSpecialist>(); using (MySqlConnection conn = _context.GetConnection()) { conn.Open(); string query = string.Format("update specialists set `last_name`='{1}', `first_name`='{2}', `middle_name`='{3}'," + "`email`='{4}', `password_hash`='{5}', `Health_Facilities_faculty_id`={6} where `specialist_id`={0}", specialistId.ToString(), model.LastName, model.FirstName, model.MiddleName, model.Email, model.PasswordHash, model.HealthFacilitiesFacultyId); MySqlCommand cmd = new MySqlCommand(query, conn); try { cmd.ExecuteNonQuery(); } catch (Exception ex) { string s = ex.Message; return(false); } finally { conn.CloseAsync(); } } return(true); }
public List <Model.Specialist> Handle(string email, string password) { List <Model.Specialist> list = new List <Model.Specialist>(); using (MySqlConnection conn = _context.GetConnection()) { conn.Open(); string query = string.Format("SELECT hospital_database.specialists.`last_name`, hospital_database.specialists.`first_name`, " + "hospital_database.specialists.`middle_name`, hospital_database.specialists.`specialist_id`, " + "hospital_database.specialists.`birthday`, hospital_database.specialists.`education`, " + "hospital_database.specialists.`position`, hospital_database.specialists.`admission_date`, " + "hospital_database.specialists.`wage_rate`, hospital_database.specialists.`Parlours_parlour_id`, " + "hospital_database.units.`unit_name`, hospital_database.subunits.`subunit_name`, " + "hospital_database.doctors.`qualification`, hospital_database.doctors.`diploma_speciality`, " + "hospital_database.nurses.`post_number` " + "FROM hospital_database.specialists " + "LEFT JOIN hospital_database.doctors " + "ON hospital_database.specialists.`specialist_id` = hospital_database.doctors.`Specialists_specialist_id` " + "LEFT JOIN hospital_database.nurses " + "ON hospital_database.specialists.`specialist_id` = hospital_database.nurses.`Specialists_specialist_id` " + "LEFT JOIN hospital_database.units " + "ON hospital_database.specialists.`Units_unit_id` = hospital_database.units.`unit_id` " + "LEFT JOIN hospital_database.subunits " + "ON hospital_database.specialists.`Subunits_subunit_id` = hospital_database.subunits.`subunit_id` " + "WHERE (email, password_hash) = ('{0}', '{1}')", email, Hash.FindHash(password)); MySqlCommand cmd = new MySqlCommand(query, conn); try { using (var reader = cmd.ExecuteReader()) { while (reader.Read()) { list.Add(new Model.Specialist() { Id = Convert.ToInt32(reader["specialist_id"]), LastName = reader["last_name"].ToString(), FirstName = reader["first_name"].ToString(), MiddleName = reader["middle_name"].ToString(), Birthday = reader["birthday"].ToString(), Education = reader["education"].ToString(), Position = reader["position"].ToString(), AdmissionDate = reader["admission_date"].ToString(), WageRate = Convert.ToDecimal(reader["wage_rate"]), Subunit = reader["subunit_name"].ToString(), Unit = reader["unit_name"].ToString(), Parlour = Convert.ToInt32(reader["Parlours_parlour_id"]), DiplomaSpeciality = reader["diploma_speciality"].ToString(), Qualification = reader["qualification"].ToString() == "" ? -1 : Convert.ToInt32(reader["qualification"]), PostNumber = reader["post_number"].ToString() == "" ? -1 : Convert.ToInt32(reader["post_number"]), IsDoctor = reader["diploma_speciality"].ToString() == "" ? false : true }); } } } catch { return(null); } finally { conn.CloseAsync(); } } return(list); }