protected void btnEnter_Click(object sender, EventArgs e)
{
//local variables for new user
string studentName = ddlStudentName.SelectedValue;
//DBConnect object
DBConnect dbobj = new DBConnect();
//good code
//Database Updates
SqlCommand sqlCommand = new SqlCommand();
sqlCommand.CommandType = CommandType.StoredProcedure;
sqlCommand.CommandText = "AddNewStudent";
// sqlCommand.Parameters.AddWithValue("@StudentID", studentID);
sqlCommand.Parameters.AddWithValue("@Name", studentName);
// sqlCommand.Parameters.AddWithValue("@FieldOfStudy", fieldOfStudy);
dbobj.DoUpdateUsingCmdObj(sqlCommand);
//bad code
//SqlCommand objCommand = new SqlCommand();
//objCommand.CommandType = CommandType.StoredProcedure;
//objCommand.CommandText = "GetRentalCarAgencies";
//objCommand.Parameters.AddWithValue("@city", city);
//objCommand.Parameters.AddWithValue("@state", state);
//DBConnect objDB = new DBConnect();
//return objDB.GetDataSetUsingCmdObj(objCommand);
}
public void AddTPCustomerToDB(string email)
{
DBConnect objDB = new DBConnect();
SqlCommand objCommand = new SqlCommand();
objCommand.CommandType = CommandType.StoredProcedure;
objCommand.CommandText = "AddTPCustomer";
objCommand.Parameters.AddWithValue("@email", );
int result = objDB.DoUpdateUsingCmdObj(objCommand);
}
public void AddCreditCardAccount(string name, float cardNumber, int expMonth, int expYear, int CSV)
{
DBConnect objdb = new DBConnect();
SqlCommand sqlCommand = new SqlCommand();
sqlCommand.CommandType = CommandType.StoredProcedure;
sqlCommand.CommandText = "AddNewCreditCard";
//Values to go into Account Table
sqlCommand.Parameters.AddWithValue("@Name", name);
sqlCommand.Parameters.AddWithValue("@CardNumber", cardNumber);
sqlCommand.Parameters.AddWithValue("@ExpMonth", expMonth);
sqlCommand.Parameters.AddWithValue("@ExpYear", expYear);
sqlCommand.Parameters.AddWithValue("@CSV", CSV);
objdb.DoUpdateUsingCmdObj(sqlCommand);
}
public void addTransactionLog(string name, float cardNumber, int expMonth, int expYear, int CSV, decimal balance, decimal transactionAmt )
{
// stored procedure "AddTransactionLog"
DBConnect objdb = new DBConnect();
SqlCommand sqlCommand = new SqlCommand();
sqlCommand.CommandType = CommandType.StoredProcedure;
sqlCommand.CommandText = "AddTransactionLog";
sqlCommand.Parameters.AddWithValue("@Name", name);
sqlCommand.Parameters.AddWithValue("@CardNumber", cardNumber);
sqlCommand.Parameters.AddWithValue("@ExpMonth", expMonth);
sqlCommand.Parameters.AddWithValue("@ExpYear", expYear);
sqlCommand.Parameters.AddWithValue("@CSV", CSV);
sqlCommand.Parameters.AddWithValue("@Balance", balance);
sqlCommand.Parameters.AddWithValue("@TransactionAmount", transactionAmt);
objdb.DoUpdateUsingCmdObj(sqlCommand);
}
public void updateName(string name, int AccountID)
{
DBConnect objdb = new DBConnect();
SqlCommand sqlCommand = new SqlCommand();
sqlCommand.CommandType = CommandType.StoredProcedure;
sqlCommand.CommandText = "UpdateAccountName";
sqlCommand.Parameters.AddWithValue("@Name", name);
sqlCommand.Parameters.AddWithValue("@AccountID", AccountID);
objdb.DoUpdateUsingCmdObj(sqlCommand);
}
public void UpdateExpYear(int expYear, int AccountID)
{
DBConnect objdb = new DBConnect();
SqlCommand sqlCommand = new SqlCommand();
sqlCommand.CommandType = CommandType.StoredProcedure;
sqlCommand.CommandText = "UpdateExpYear";
sqlCommand.Parameters.AddWithValue("@ExpYear", expYear);
sqlCommand.Parameters.AddWithValue("@AccountID", AccountID);
objdb.DoUpdateUsingCmdObj(sqlCommand);
}
public void updateCardNumber(float cardNumber, int AccountID)
{
DBConnect objdb = new DBConnect();
SqlCommand sqlCommand = new SqlCommand();
sqlCommand.CommandType = CommandType.StoredProcedure;
sqlCommand.CommandText = "UpdateCardNumber";
sqlCommand.Parameters.AddWithValue("@CardNumber", cardNumber);
sqlCommand.Parameters.AddWithValue("@AccountID", AccountID);
objdb.DoUpdateUsingCmdObj(sqlCommand);
}
public int Transaction(string name, float cardNumber,int expMonth, int expYear, int CSV, double transactionAmt)
{
int returnval;
//get Account Balance
decimal balance = getAccountBalance(name, cardNumber);
decimal transaction = decimal.Parse(transactionAmt.ToString());
//if balance is greater than transaction amount, do the transaction
if (balance > transaction)
{
//Update Account balance using stored procedure
DBConnect objdb = new DBConnect();
SqlCommand sqlCommand = new SqlCommand();
sqlCommand.CommandType = CommandType.StoredProcedure;
sqlCommand.CommandText = "UpdateAccountBalance";
sqlCommand.Parameters.AddWithValue("@CardNumber", cardNumber);
sqlCommand.Parameters.AddWithValue("@TransactionAmount", transactionAmt);
objdb.DoUpdateUsingCmdObj(sqlCommand); //execute update
//create a log of the transaction
addTransactionLog(name, cardNumber, expMonth, expYear, CSV, balance, transaction);
returnval = 0;
}
else
{
returnval = 1;
}
return returnval;
}
protected void gvCourses_RowDeleting(object sender, GridViewDeleteEventArgs e)
{
int rowIndex = e.RowIndex;
int selectedCRN = int.Parse(gvCourses.Rows[rowIndex].Cells[1].Text);
DBConnect objDB = new DBConnect();
SqlCommand objCommand = new SqlCommand();
objCommand.CommandType = CommandType.StoredProcedure;
objCommand.CommandText = "DeleteCourse";
objCommand.Parameters.AddWithValue("@CRN", selectedCRN);
objDB.GetDataSetUsingCmdObj(objCommand);
objDB.DoUpdateUsingCmdObj(objCommand);
loadCourses();
}