-- MyPage.aspx

<%@ Page Title="" Language="C#" MasterPageFile="~/Site.master" AutoEventWireup="true" CodeFile="MyPage.aspx.cs" Inherits="MyPage" %>

<asp:Content ID="Content1" ContentPlaceHolderID="HeadContent" Runat="Server">
</asp:Content>
<asp:Content ID="Content2" ContentPlaceHolderID="FeaturedContent" Runat="Server">
</asp:Content>
<asp:Content ID="Content3" ContentPlaceHolderID="MainContent" Runat="Server">
    <asp:TextBox ID="m_search" runat="server"></asp:TextBox>
    <asp:Button ID="m_refresh" runat="server" Text="Refresh" OnClick="m_refresh_Click" />
   <asp:Repeater ID="m_rptEmployees" runat="server">
    	<HeaderTemplate>
					<table cellpadding="4" cellspacing="0" border="0"  width="60%">
						<tr style="background-color:#CCFFCC">
							<th align="left">First Name</th>

							<th align="left">Last Name</th>

                            <th align="left">Address</th>

                            <th align="left">City</th>
						</tr>
				</HeaderTemplate>
				<ItemTemplate>
					<tr valign="top">
						<td ><%# DataBinder.Eval(Container.DataItem, "FirstName")%></td>
						<td ><a href="editEmployee.aspx?id=<%# DataBinder.Eval(Container.DataItem, "EmployeeId")%>"
                        title="Edit <%# DataBinder.Eval(Container.DataItem, "LastName")%>"> <%# DataBinder.Eval(Container.DataItem, "LastName")%></a></td>
                        <td ><%# DataBinder.Eval(Container.DataItem, "Address")%></td>
                        <td ><%# DataBinder.Eval(Container.DataItem, "City")%></td>

					</tr>
				</ItemTemplate>
				<AlternatingItemTemplate>
                    <tr valign="top"  style="background-color:#CCFFCC">
                    <td  ><%# DataBinder.Eval(Container.DataItem, "FirstName")%></td>
						<td ><a href="editEmployee.aspx?id=<%# DataBinder.Eval(Container.DataItem, "EmployeeId")%>"
                        title="Edit <%# DataBinder.Eval(Container.DataItem, "LastName")%>"> <%# DataBinder.Eval(Container.DataItem, "LastName")%></a></td>
                        <td ><%# DataBinder.Eval(Container.DataItem, "Address")%></td>
                         <td ><%# DataBinder.Eval(Container.DataItem, "City")%></td>

					</tr>
				</AlternatingItemTemplate>
				<FooterTemplate>
					</table>
				</FooterTemplate>
    </asp:Repeater>
</asp:Content>





-- MyPage.aspx.cs


using System;
using System.Collections.Generic;
using System.Configuration;
using System.Data;
using System.Data.SqlClient;
using System.Linq;
using System.Text;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;

public partial class MyPage : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
        String strSearch = this.m_search.Text;

        string cs = ConfigurationManager.AppSettings["DBConnectionString"];
        StringBuilder sb1 = new StringBuilder();
        sb1.Append("select EmployeeID,FirstName,LastName,Address,City from dbo.Employees");
        if (strSearch.Length > 0)
        {
            //sb1.AppendFormat(" where LastName like '%{0}%'", strSearch);
            sb1.Append(" where LastName like @LIKENAME");
        }
        using (SqlConnection con = new SqlConnection(cs))
        {
            SqlCommand cmd = new SqlCommand(sb1.ToString(), con);
            cmd.CommandType = CommandType.Text;
            if (strSearch.Length > 0)
            {
                string str = "%" + strSearch + "%";
                cmd.Parameters.Add(new SqlParameter("@LIKENAME", str));
            }
            SqlDataAdapter da = new SqlDataAdapter(cmd);
            DataSet ds = new DataSet();
            da.Fill(ds);

            this.m_rptEmployees.DataSource = ds;

            this.m_rptEmployees.DataBind();
        }
    }

    protected void m_refresh_Click(object sender, EventArgs e)
    {

    }
}


--editEmployee.cs

using System;
using System.Collections.Generic;
using System.Configuration;
using System.Data;
using System.Data.SqlClient;
using System.Linq;
using System.Text;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;

public partial class editEmployee : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
        if (IsPostBack) return;
        string cs = ConfigurationManager.AppSettings["DBConnectionString"];

        int id = 1;
        try { id = Convert.ToInt32(Request.QueryString["id"]); }
        catch { id = 1; }
        if (id < 1) id = 1;

        using (SqlConnection con = new SqlConnection(cs))
        {
            StringBuilder sb1 = new StringBuilder();
            sb1.Append("select EmployeeID,FirstName,LastName,Address,City from dbo.Employees WHERE EmployeeID=@ID");
            //sb1.Append("getEmployee"); ;
            SqlCommand cmd = new SqlCommand(sb1.ToString(), con);
            //cmd.CommandType = CommandType.StoredProcedure;
            cmd.CommandType = CommandType.Text;
            string idStr = id.ToString();
            cmd.Parameters.Add(new SqlParameter("@ID", idStr));
            con.Open();
            SqlDataReader rdr = cmd.ExecuteReader();
            while (rdr.Read())
            {

                m_id.Text = rdr["EmployeeID"].ToString().Trim();
                m_first.Text = rdr["FirstName"].ToString().Trim();
                m_name.Text = rdr["LastName"].ToString().Trim();
                m_address.Text = rdr["Address"].ToString().Trim();
                m_city.Text = rdr["City"].ToString().Trim();

                break;
            }
            con.Close();
        }
    }

    protected void m_update_Click(object sender, EventArgs e)
    {
        string cs = ConfigurationManager.AppSettings["DBConnectionString"];
        using (SqlConnection con = new SqlConnection(cs))
        {
            //StringBuilder sb1 = new StringBuilder();
            //sb1.Append("update  Employees set FirstName=");
            //sb1.Append("'");
            //sb1.Append(m_first.Text.Trim());
            //sb1.Append("'");
            //sb1.Append(",LastName=");
            //sb1.AppendFormat("'{0}'", m_name.Text.Trim());
            //sb1.Append(",Address=");
            //sb1.AppendFormat("'{0}'", m_address.Text.Trim());
            //sb1.Append(",City=");
            //sb1.AppendFormat("'{0}'", m_city.Text.Trim());
            //sb1.Append(" WHERE EmployeeID=");
            //sb1.Append(m_id.Text.Trim());
            //string S = sb1.ToString();
            //SqlCommand cmd = new SqlCommand(sb1.ToString(), con);
            //cmd.CommandType = CommandType.Text;

            SqlCommand cmd = new SqlCommand("sp_UpdateEmployee", con);
            cmd.CommandType = CommandType.StoredProcedure;

            SqlParameter parameter1 = new SqlParameter("@Id", m_id.Text);
            cmd.Parameters.Add(parameter1);
            SqlParameter parameter2 = new SqlParameter("@FirstName", m_first.Text);
            cmd.Parameters.Add(parameter2);
            SqlParameter parameter3 = new SqlParameter("@LastName", m_name.Text);
            cmd.Parameters.Add(parameter3);
            SqlParameter parameter4 = new SqlParameter("@Address", m_address.Text);
            cmd.Parameters.Add(parameter4);
            SqlParameter parameter5 = new SqlParameter("@City", m_city.Text);
            cmd.Parameters.Add(parameter5);



            con.Open();
            cmd.ExecuteNonQuery();
        }

        Response.Redirect("MyPage.aspx");
    }

    protected void m_cancel_Click(object sender, EventArgs e)
    {
        Response.Redirect("MyPage.aspx");
    }
}