using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data;
using System.Data.SqlClient;

public partial class Payment : System.Web.UI.Page
{
    string connStr = "Data Source=(LocalDB)\\mssqllocaldb;AttachDbFilename=C:\\Users\\darre\\Desktop\\ComplexFitness NEW\\App_Data\\StoreDB.mdf;Integrated Security = True";
    protected void Page_Load(object sender, EventArgs e)
    {
        lbl_TotalCost.Text = Session["totalcost"].ToString();
        //string myValue = (string)Session["Cart"];
        //Response.Write(myValue);
    }


    protected void Button1_Click(object sender, EventArgs e)

    {
        string PaymentID = lbl_PaymentID.Text;
        string CardNumber = tb_CardNumber.Text;
        string CardExpiry = tb_CardExpiry.Text;

        string queryStr = "SELECT * FROM [Payment] WHERE PaymentID = @PaymentID";
        SqlConnection conn = new SqlConnection(connStr);
        SqlCommand cmd = new SqlCommand(queryStr, conn);

        string queryStr_1 = "INSERT INTO [Payment](CardNumber, CardExpiry)" + " values (@CardNumber, @CardExpiry)";
        SqlCommand cmd_1 = new SqlCommand(queryStr_1, conn);
        cmd_1.Parameters.AddWithValue("@CardNumber", CardNumber);
        cmd_1.Parameters.AddWithValue("@CardExpiry", CardExpiry);




        conn.Open();
        cmd_1.ExecuteNonQuery();
        conn.Close();

        ScriptManager.RegisterStartupScript(this, this.GetType(),"alert","alert('Thank You For Your Payment');window.location ='Orderstatement.aspx';",true);

    }
}