1using System;
  2using System.Data;
  3using System.Data.SqlClient;
  4using System.Configuration;
  5using System.Collections;
  6using System.Web;
  7using System.Web.Security;
  8using System.Web.UI;
  9using System.Web.UI.WebControls;
 10using System.Web.UI.WebControls.WebParts;
 11using System.Web.UI.HtmlControls;
 12
 13public partial class AddEdition : System.Web.UI.Page
 14...{
 15    protected void Page_Load(object sender, EventArgs e)
 16    ...{
 17        this.Header.Title = Application.Get("siteName") + "---" + this.Header.Title;
 18        if (!Page.IsPostBack)
 19        ...{            
 20            this.info.Text = "提示：版块名称必须填写，其余各项可以不填。管理账号不填则任何人都可以管理该版块，选择不开放版块则只有拥有版块口令的人可以使用该版块。";
 21        }
 22    }
 23
 24    private string StringFilter(string inStr)
 25    ...{
 26        string outStr;
 27        outStr = inStr.Trim().Replace("\'", "");
 28        return outStr;
 29    }
 30
 31    protected void AddEditionBtn_Click(object sender, EventArgs e)
 32    ...{
 33        //Response.Write("<script>alert('用户名不存在或密码错误,请重新输入！');</script>");
 34        //this.Response.Redirect("AddEdition.aspx");
 35        if (Page.IsValid)
 36        ...{
 37            try
 38            ...{
 39                string conStr = Application.Get("conStr").ToString();
 40                SqlConnection sqlCon = new SqlConnection(conStr);
 41                sqlCon.Open();
 42
 43                string nameStr = StringFilter(name.Text);
 44                string cmdStr = "select name from dbo.edition where name='"+nameStr+"'";
 45                SqlCommand sqlCmd = new SqlCommand(cmdStr, sqlCon);
 46                SqlDataReader sqlDR = sqlCmd.ExecuteReader();
 47                if (sqlDR.Read())
 48                ...{                    
 49                    info.Text = "版块名称不可用，可能已经存在该版块！";
 50                    sqlDR.Close();
 51                }
 52                else
 53                ...{
 54                    sqlDR.Close();
 55                    int articleNum = 0;
 56                    int click = 0;
 57                    string adminStr = StringFilter(admin.Text);                    
 58                    string pwdStr = null;
 59                    string pwdStrMD5 = null;
 60                    if (!string.IsNullOrEmpty(adminStr))
 61                    ...{
 62                        pwdStr = StringFilter(pwd.Text);
 63                        if(!string.IsNullOrEmpty(pwdStr))
 64                            pwdStrMD5 = FormsAuthentication.HashPasswordForStoringInConfigFile(pwdStr, "MD5");
 65                    }
 66                    string contactStr = StringFilter(contact.Text);
 67                    string openStr = "是";
 68                    string upwdStr = null;
 69                    string upwdStrMD5 = null;
 70                    if (openNo.Checked && !string.IsNullOrEmpty(adminStr))
 71                    ...{
 72                        openStr = "否";
 73                        upwdStr = StringFilter(userPwd.Text);
 74                        if (!string.IsNullOrEmpty(upwdStr))
 75                            upwdStrMD5 = FormsAuthentication.HashPasswordForStoringInConfigFile(upwdStr, "MD5");
 76                    }
 77                                        
 78                    if (string.IsNullOrEmpty(upwdStr))
 79                    ...{
 80                        openStr = "是";
 81                    }
 82
 83                    string cTime = DateTime.Now.ToShortDateString();
 84                    string lTime = cTime;
 85                    
 86                    cmdStr = "insert into dbo.edition(name,articleNum,admin,pwd,contact,isOpen,userPwd,createTime,lastTime,click) values('" + nameStr + "','" + articleNum + "','" + adminStr + "','" + pwdStrMD5 + "','" + contactStr + "','" + openStr + "','" + upwdStrMD5 + "','" + cTime + "','" + lTime + "','" + click + "')";
 87
 88                    sqlCmd.CommandText = cmdStr;
 89                    sqlCmd.Connection = sqlCon;
 90
 91                    sqlCmd.ExecuteNonQuery();
 92                    info.Text = "注册成功，请牢记您的注册信息：<br /> 版块名称：" + nameStr;
 93                    if (!string.IsNullOrEmpty(adminStr))
 94                    ...{
 95                        info.Text += "，管理账号：" + adminStr;
 96                        if (!string.IsNullOrEmpty(pwdStr))
 97                            info.Text += "，管理密码：" + pwdStr;
 98                    }
 99                    if (openStr.CompareTo("是") == 0)
100                    ...{
101                        info.Text += "，您选择了开放版块";
102                    }
103                    else
104                    ...{
105                        info.Text += "，您选择了不开放版块，版块口令：" + upwdStr;
106                    }
107                }
108             
109                sqlCon.Close();
110            }
111            catch(Exception ex)
112            ...{
113                info.Text = "系统操纵错误：" + ex.Message;
114            }           
115        }
116    }
117}
118