-- MyPage.aspx <%@ Page Title="" Language="C#" MasterPageFile="~/Site.master" AutoEventWireup="true" CodeFile="MyPage.aspx.cs" Inherits="MyPage" %>
First Name Last Name Address City
<%# DataBinder.Eval(Container.DataItem, "FirstName")%> " title="Edit <%# DataBinder.Eval(Container.DataItem, "LastName")%>"> <%# DataBinder.Eval(Container.DataItem, "LastName")%> <%# DataBinder.Eval(Container.DataItem, "Address")%> <%# DataBinder.Eval(Container.DataItem, "City")%>
<%# DataBinder.Eval(Container.DataItem, "FirstName")%> " title="Edit <%# DataBinder.Eval(Container.DataItem, "LastName")%>"> <%# DataBinder.Eval(Container.DataItem, "LastName")%> <%# DataBinder.Eval(Container.DataItem, "Address")%> <%# DataBinder.Eval(Container.DataItem, "City")%>
-- MyPage.aspx.cs using System; using System.Collections.Generic; using System.Configuration; using System.Data; using System.Data.SqlClient; using System.Linq; using System.Text; using System.Web; using System.Web.UI; using System.Web.UI.WebControls; public partial class MyPage : System.Web.UI.Page { protected void Page_Load(object sender, EventArgs e) { String strSearch = this.m_search.Text; string cs = ConfigurationManager.AppSettings["DBConnectionString"]; StringBuilder sb1 = new StringBuilder(); sb1.Append("select EmployeeID,FirstName,LastName,Address,City from dbo.Employees"); if (strSearch.Length > 0) { //sb1.AppendFormat(" where LastName like '%{0}%'", strSearch); sb1.Append(" where LastName like @LIKENAME"); } using (SqlConnection con = new SqlConnection(cs)) { SqlCommand cmd = new SqlCommand(sb1.ToString(), con); cmd.CommandType = CommandType.Text; if (strSearch.Length > 0) { string str = "%" + strSearch + "%"; cmd.Parameters.Add(new SqlParameter("@LIKENAME", str)); } SqlDataAdapter da = new SqlDataAdapter(cmd); DataSet ds = new DataSet(); da.Fill(ds); this.m_rptEmployees.DataSource = ds; this.m_rptEmployees.DataBind(); } } protected void m_refresh_Click(object sender, EventArgs e) { } } --editEmployee.cs using System; using System.Collections.Generic; using System.Configuration; using System.Data; using System.Data.SqlClient; using System.Linq; using System.Text; using System.Web; using System.Web.UI; using System.Web.UI.WebControls; public partial class editEmployee : System.Web.UI.Page { protected void Page_Load(object sender, EventArgs e) { if (IsPostBack) return; string cs = ConfigurationManager.AppSettings["DBConnectionString"]; int id = 1; try { id = Convert.ToInt32(Request.QueryString["id"]); } catch { id = 1; } if (id < 1) id = 1; using (SqlConnection con = new SqlConnection(cs)) { StringBuilder sb1 = new StringBuilder(); sb1.Append("select EmployeeID,FirstName,LastName,Address,City from dbo.Employees WHERE EmployeeID=@ID"); //sb1.Append("getEmployee"); ; SqlCommand cmd = new SqlCommand(sb1.ToString(), con); //cmd.CommandType = CommandType.StoredProcedure; cmd.CommandType = CommandType.Text; string idStr = id.ToString(); cmd.Parameters.Add(new SqlParameter("@ID", idStr)); con.Open(); SqlDataReader rdr = cmd.ExecuteReader(); while (rdr.Read()) { m_id.Text = rdr["EmployeeID"].ToString().Trim(); m_first.Text = rdr["FirstName"].ToString().Trim(); m_name.Text = rdr["LastName"].ToString().Trim(); m_address.Text = rdr["Address"].ToString().Trim(); m_city.Text = rdr["City"].ToString().Trim(); break; } con.Close(); } } protected void m_update_Click(object sender, EventArgs e) { string cs = ConfigurationManager.AppSettings["DBConnectionString"]; using (SqlConnection con = new SqlConnection(cs)) { //StringBuilder sb1 = new StringBuilder(); //sb1.Append("update Employees set FirstName="); //sb1.Append("'"); //sb1.Append(m_first.Text.Trim()); //sb1.Append("'"); //sb1.Append(",LastName="); //sb1.AppendFormat("'{0}'", m_name.Text.Trim()); //sb1.Append(",Address="); //sb1.AppendFormat("'{0}'", m_address.Text.Trim()); //sb1.Append(",City="); //sb1.AppendFormat("'{0}'", m_city.Text.Trim()); //sb1.Append(" WHERE EmployeeID="); //sb1.Append(m_id.Text.Trim()); //string S = sb1.ToString(); //SqlCommand cmd = new SqlCommand(sb1.ToString(), con); //cmd.CommandType = CommandType.Text; SqlCommand cmd = new SqlCommand("sp_UpdateEmployee", con); cmd.CommandType = CommandType.StoredProcedure; SqlParameter parameter1 = new SqlParameter("@Id", m_id.Text); cmd.Parameters.Add(parameter1); SqlParameter parameter2 = new SqlParameter("@FirstName", m_first.Text); cmd.Parameters.Add(parameter2); SqlParameter parameter3 = new SqlParameter("@LastName", m_name.Text); cmd.Parameters.Add(parameter3); SqlParameter parameter4 = new SqlParameter("@Address", m_address.Text); cmd.Parameters.Add(parameter4); SqlParameter parameter5 = new SqlParameter("@City", m_city.Text); cmd.Parameters.Add(parameter5); con.Open(); cmd.ExecuteNonQuery(); } Response.Redirect("MyPage.aspx"); } protected void m_cancel_Click(object sender, EventArgs e) { Response.Redirect("MyPage.aspx"); } }