C# Database.AddParameter方法代码示例

    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            int id;
            if (!int.TryParse(Request.QueryString["id"], out id))
            {
                Response.Redirect("~/MediaCenter.aspx");
            }
            Database db = new Database();
            Lang lang = new Lang();
            db.AddParameter("@lang", lang.getCurrentLang());
            db.AddParameter("@id", id);
            DataTable dt = db.ExecuteDataTable("select top(3) * from Report where [email protected] and (not [email protected]) Order by id desc");
            Repeater1.DataSource = dt;
            Repeater1.DataBind();

            db.AddParameter("@lang", lang.getCurrentLang());
            dt = db.ExecuteDataTable("select top(3) * from SocialEvent where [email protected] Order by id desc");
            Repeater2.DataSource = dt;
            Repeater2.DataBind();

            db.AddParameter("@lang", lang.getCurrentLang());
            db.AddParameter("@id", id);
            dt = db.ExecuteDataTable("select * from Report where [email protected] and [email protected]");
            Repeater3.DataSource = dt;
            Repeater3.DataBind();

            if (dt.Rows.Count == 0)
            {
                Response.Redirect("~/MediaCenter.aspx");
            }
        }
    }

    private void LoadData(string name = "", string jobTitle = "",string organization="")
    {
        Database db = new Database();

        string sql = "select * from users  where IsActive=1 ";
        if (!string.IsNullOrWhiteSpace(name))
        {
            sql += " and users.name like '%' + @name + '%'";
            db.AddParameter("@name", name);
        }
        if (!string.IsNullOrWhiteSpace(jobTitle))
        {
            sql += " and users.JobTitle like '%' + @JobTitle + '%'";
            db.AddParameter("@JobTitle", jobTitle);
        }
        if (!string.IsNullOrWhiteSpace(organization))
        {
            sql += " and users.organization like '%' + @organization + '%'";
            db.AddParameter("@organization", organization);
        }

        DataTable dt = db.ExecuteDataTable(sql);
        ListView1.DataSource = dt;
        ListView1.DataBind();
    }

    private void GetData(string name,DateTime? date)
    {
        Database db = new Database();
        Lang lang = new Lang();
        string sqlSearch = "select * from Event where [email protected]";
        db.AddParameter("@lang", lang.getCurrentLang());

        if (!string.IsNullOrWhiteSpace(name))
        {
            sqlSearch += " and title like '%' + @name + '%'";
            db.AddParameter("@name", name);
        }
        if (date.HasValue)
        {
            sqlSearch += " and (year(EventDate)[email protected] and  month(EventDate)[email protected] and day(EventDate)[email protected]  )";

            db.AddParameter("@year",date.Value.Year);
            db.AddParameter("@month", date.Value.Month);
            db.AddParameter("@day", date.Value.Day);
        }

        DataTable dt = db.ExecuteDataTable(sqlSearch);
        ListView1.DataSource = dt;
        ListView1.DataBind();
    }

    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            Database db=new Database();
            Lang lang=new Lang();

            string albumsSql = "select top(4) * from albums where [email protected] order by showOrder";
            string aboutSql = "select  * from pages where [email protected] and [email protected]";
            db.AddParameter("@lang", lang.getCurrentLang());
            if (Request.QueryString["page"] != null)
            {
                db.AddParameter("@key", Request.QueryString["page"]);
            }
            else
            {
                db.AddParameter("@key", "HomeAbout");
            }

            DataSet ds = db.ExecuteDataSet(aboutSql+";"+albumsSql);
            Repeater1.DataSource = ds.Tables[0];
            Repeater1.DataBind();

            Repeater2.DataSource = ds.Tables[1];
            Repeater2.DataBind();

        }
    }

    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {

            int id = -1;
            if (int.TryParse(Request.QueryString["id"], out id))
            {
                Database db = new Database();
                Lang lang = new Lang();
                db.AddParameter("@id", id);
                db.AddParameter("@lang", lang.getCurrentLang());
                DataTable dt = db.ExecuteDataTable("select country.name as countryname,researcher.* from Researcher inner join Country on Researcher.Country=Country.id where [email protected] and researcher.IsAproved=1 and [email protected]");
                if(dt.Rows.Count==0)
                {
                    Response.Redirect("Experts.aspx");
                }
                Repeater1.DataSource = dt;
                Repeater1.DataBind();

                LoadResearch(id,"",null,null);

                txtTitle.Attributes.Add("onkeydown", "if(event.which || event.keyCode){if ((event.which == 13) || (event.keyCode == 13)) {__doPostBack('" + btnSearch.UniqueID + "','');}} ");
                txtFrom.Attributes.Add("onkeydown", "if(event.which || event.keyCode){if ((event.which == 13) || (event.keyCode == 13)) {__doPostBack('" + btnSearch.UniqueID + "','');}} ");
                txtTo.Attributes.Add("onkeydown", "if(event.which || event.keyCode){if ((event.which == 13) || (event.keyCode == 13)) {__doPostBack('" + btnSearch.UniqueID + "','');}} ");
            }
        }
    }

    protected void btnLogin_Click(object sender, EventArgs e)
    {
        Database db = new Database();
        db.AddParameter("@uname", txtUserName.Text);
        db.AddParameter("@password", txtPassword.Text);
        System.Data.DataTable dt = db.ExecuteDataTable("Select * from AdminUsers where ([email protected] or [email protected]) and ([email protected])");
        if (dt.Rows.Count != 0)
        {

            if(cbRememberMe.Checked)
            {
                HttpCookie c=new HttpCookie("ASUserName", txtUserName.Text);
                c.Expires = DateTime.Now.AddYears(1);
                Response.Cookies.Add(c);
                c = new HttpCookie("ASPassword", txtPassword.Text);
                c.Expires = DateTime.Now.AddYears(1);
                Response.Cookies.Add(c);
            }
            else
            {
                HttpCookie c = new HttpCookie("ASUserName", "");
                c.Expires = DateTime.Now.AddDays(-1);
                Response.Cookies.Add(c);
                c = new HttpCookie("ASPassword", "");
                c.Expires = DateTime.Now.AddDays(-1);
                Response.Cookies.Add(c);
            }

            if(cbKeepMeLogin.Checked)
            {
                HttpCookie c = new HttpCookie("ASCMSKeepOnline", dt.Rows[0]["id"].ToString());
                c.Expires = DateTime.Now.AddDays(20);
                Response.Cookies.Add(c);
            }
            else
            {
                HttpCookie c = new HttpCookie("ASCMSKeepOnline", "");
                c.Expires = DateTime.Now.AddDays(-1);
                Response.Cookies.Add(c);
            }

            AdminInfo admininfo = new AdminInfo(dt.Rows[0]["id"].ToString(), dt.Rows[0]["name"].ToString(), dt.Rows[0]["username"].ToString(), dt.Rows[0]["password"].ToString(), dt.Rows[0]["email"].ToString(), dt.Rows[0]["permition"].ToString());
            Session["AdminInfo"] = admininfo;

            if (Request.QueryString["url"] == null)
            {
                Response.Redirect("default.aspx");
            }
            else
            {
                Response.Redirect(Request.QueryString["url"]);
            }
        }
        else
        {
            ErrorDiv.Visible = true;
            sp1.Visible = true;
            lblError.Text = "<i class=\"fa fa-exclamation-triangle fcRed\"></i> خطا في بيانات الدخول الرجاء التاكد من اسم المستخدم و كلمة المرور ";
        }
    }

 protected void btnSendMsg_OnClick(object sender, EventArgs e)
 {
     Database db = new Database();
     db.AddParameter("@from", DBNull.Value);
     db.AddParameter("@title", txtTitle.Text);
     string msg = "البريد الالكتروني : " + txtEmail.Text + "<br/>";
     msg += txtMsg.Text;
     db.AddParameter("@msg", msg);
     db.ExecuteNonQuery("insert into msg([from],title,msg) values(@from,@title,@msg)");
     ClientScript.RegisterClientScriptBlock(GetType(), "Alert-Msg", "alert('تم ارسال الرسالة الى مدير الموقع');", true);
 }

 protected void btnSendMsg_OnClick(object sender, EventArgs e)
 {
     if (ValidateData())
     {
         Database db = new Database();
         Users u = Session["User"] as Users;
         db.AddParameter("@from", u.Id);
         db.AddParameter("@to", hiddenId.Value);
         db.AddParameter("@title", txtSubject.Text);
         db.AddParameter("@msg", txtMsg.Text);
         db.ExecuteNonQuery("insert into msg([from],toId,title,msg) values(@from,@to,@title,@msg)");
         ShowAlert("تم ارسال الرسالة بنجاح",MsgType.Success);
     }
 }

    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            Database db=new Database();
            Lang lan=new Lang();

            string showcaseSql = "select * from Showcase where [email protected] order by showorder";
            string aboutHomeSql = "select * from Pages where [email protected] and [email protected]";
            string partnerSql = "select * from Partners where [email protected] Order By ShowOrder";
            string PublicationsSql = "select top(2) * from Publications where [email protected] Order By id desc";
            string newsSql = "select top(2) * from News where [email protected] Order By id desc";
            string publicResearchSql = "select top(5) * from Library where [email protected] Order By Id Desc";

            db.AddParameter("@lang", lan.getCurrentLang());
            db.AddParameter("@homeAbout", "HomeAbout");

            DataSet ds = db.ExecuteDataSet(showcaseSql+";"+aboutHomeSql+";"+partnerSql+";"+PublicationsSql+ ";"+newsSql+";"+publicResearchSql);
            Repeater1.DataSource = ds.Tables[0];

            if (ds.Tables[0].Rows.Count < 1)
            {

                myCarousel.Visible = false;
            }
            else
            {
                myCarousel.Visible = true;
            }
            Repeater1.DataBind();

            Repeater2.DataSource = ds.Tables[1];
            Repeater2.DataBind();

            Repeater3.DataSource = ds.Tables[2];
            Repeater3.DataBind();

            Repeater4.DataSource = ds.Tables[3];
            Repeater4.DataBind();

            Repeater5.DataSource = ds.Tables[4];
            Repeater5.DataBind();

            Repeater6.DataSource = ds.Tables[5];
            Repeater6.DataBind();
            LoadPoll();

        }
    }

    protected void btnSendMsg_OnClick(object sender, EventArgs e)
    {
        DivError.Visible = false;
        if (string.IsNullOrWhiteSpace(txtTo.Text))
        {
            DivError.Visible = true;
            DivError.CssClass += "alert alert-danger text-center";
            lblError.Text = "الرجاء اختيار مستلم للرسالة واحد على الاقل";
            return;
        }
        if (string.IsNullOrWhiteSpace(txtSubject.Text))
        {
            DivError.Visible = true;
            DivError.CssClass += "alert alert-danger text-center";
            lblError.Text = "الرجاء ادخال عنوان الرسالة";
            return;
        }
        if (string.IsNullOrWhiteSpace(txtMsg.Text))
        {
            DivError.Visible = true;
            DivError.CssClass = "alert alert-danger text-center";
            lblError.Text = "الرجاء ادخال نص الرسالة";
            return;
        }
        if (txtMsg.Text.Length > 500)
        {
            DivError.Visible = true;
            DivError.CssClass = "alert alert-danger text-center";
            lblError.Text = "نص الرسالة يجب الا يتخطى الـ500 حرف.";
            return;
        }
        Database db=new Database();
        Users u = Session["User"] as Users;
        DataTable dtUsers = db.ExecuteDataTable("select * from users where isActive=1 and (id in (" + txtTo.Text + "))");
        foreach (DataRow user in dtUsers.Rows)
        {
            db.AddParameter("@from", u.Id);
            db.AddParameter("@toid", user["id"].ToString());
            db.AddParameter("@title",txtSubject.Text);
            db.AddParameter("@msg", txtMsg.Text);
            db.ExecuteNonQuery("insert into msg([from],ToId,Title,Msg) values(@from,@ToId,@Title,@Msg)");

        }
         txtMsg.Text = string.Empty;
        DivError.Visible = true;
        DivError.CssClass = "alert alert-success text-center";
        lblError.Text = "تم ارسال الرسالة";
    }

        //haal een remise op aan de hand van een ID
        public Remise GetById(int id)
        {
            Remise remise = null;

            Database db = new Database();

            try
            {
                db.CreateCommand("SELECT * FROM remise WHERE id = :id");
                db.AddParameter("id", id);

                while (db.Read())
                {
                    remise = new Remise(db.GetValueByColumn<int>("id"), db.GetValueByColumn<int>("nummer"));
                }
            }
            catch (Exception ex)
            {
                throw ex;
            }
            finally
            {
                db.Close();
            }

            return remise;
        }

        //Haal de gegevens op aan de hand van het ID en geeft van het spoor alle gegevens terug.
        public static Spoor GetById(int id)
        {
            Spoor spoor = null;

            Database db = new Database();

            try
            {
                db.CreateCommand("SELECT * FROM spoor WHERE id = :id");
                db.AddParameter("id", id);
                db.Open();
                db.Execute();
                OracleDataReader dr = db.DataReader;

                if (dr.HasRows)
                {
                    dr.Read();

                    spoor = new Spoor(dr.GetValueByColumn<int>("id"), dr.GetValueByColumn<int>("nummer"),dr.GetValueByColumn<int>("lijnnummer1"), dr.GetValueByColumn<int>("lijnnummer2"));
                }
            }
            catch (Exception ex)
            {
                throw ex;
            }
            finally
            {
                db.Close();
            }

            return spoor;
        }

    protected void Page_Load(object sender, EventArgs e)
    {
        if (!Page.IsPostBack)
        {
            Database db=new Database();
            db.AddParameter("@pageKey", "ContactUs");
            DataTable dt = db.ExecuteDataTable("select * from Pages where [email protected]");
            if (dt.Rows.Count > 0)
            {
                Repeater1.DataSource = dt;
                Repeater1.DataBind();
            }
            db.LoadDDL("Filetarget","title",ref ddlField,"المجال");
            db.LoadDDL("FileType", "title", ref ddlType, "نوع الملف");
            db.LoadDDL("country", "name", ref ddlCountry, "الدولة", "lang=2");
            if (!t.IsUserLogin(Session))
            {
                mainContainerBody.Attributes["class"] += " extended";
            }
            else
            {
                Panel1.Visible = true;
            }

        }
    }

    protected void btnAddToFav_OnCommand(object sender, CommandEventArgs e)
    {
        Database db = new Database();
        Users user = Session["User"] as Users;
        db.AddParameter("@userId", user.Id);
        db.AddParameter("@FileId", e.CommandArgument.ToString());
        DataTable dt = db.ExecuteDataTable("select * from UserFav where [email protected] and [email protected]");
        if (dt.Rows.Count == 0)
        {
            db.AddParameter("@userId", user.Id);
            db.AddParameter("@FileId", e.CommandArgument.ToString());
            db.ExecuteNonQuery("insert into UserFav(UserId,FileId) values(@UserId,@FileId)");

        }
        ShowAlert("تم اضافة الملف الى المفضلة", MsgType.Success);
    }

    protected void btnForgetPass_Click(object sender, EventArgs e)
    {
        AppFunctions v = new AppFunctions();
        if (!v.IsEmailValid(txtEmail.Text))
        {
            ErrorDiv.Visible = true;
            sp1.Visible = true;
            lblError.Text = "<i class=\"fa fa-exclamation-triangle fcRed\"></i> الرجاء التأكد من البريد الالكتروني.";
            return;
        }

        Database db = new Database();
        db.AddParameter("@email", txtEmail.Text);
        System.Data.DataTable dt = db.ExecuteDataTable("Select * from AdminUsers where [email protected]");
        if (dt.Rows.Count == 0)
        {
            ErrorDiv.Visible = true;
            sp1.Visible = true;
            lblError.Text = "<i class=\"fa fa-exclamation-triangle fcRed\"></i> هذا البريد الالكتروني غير مسجل في النظام";
            return;
        }

        string body = "<h2>";
        body += "هذة معلومات الدخول الى لوحة التحكم الخاصة بموقع الدليل الاإلكتروني لإرشفة القرارات و التعاميم الحكومية<br/>";
        body += "اسم المستخدم : " + dt.Rows[0]["username"].ToString() + "<br/>";
        body += "البريد الالكتروني : " + dt.Rows[0]["email"].ToString() + "<br/>";
        body += "كلمة السر : " + dt.Rows[0]["password"].ToString() + "<br/>";
        body += "</h2>";
        SendMail mail = new SendMail();
        mail.SendMsg(txtEmail.Text, "الدليل الاإلكتروني لإرشفة القرارات و التعاميم الحكومية", body);
        ScriptManager.RegisterClientScriptBlock(this,GetType(), "writeMsg", "alert('تم ارسال كلمة السر الي البريد الالكتروني " + txtEmail.Text + " ');", true);
    }