asp net编写的网上购物商城.doc

.Net体系及编程大作业网上商城姓名：张通学号：2220143682一、实验目的实现一个网上商城。管理员将货物信息整理归类发布到网上，用户登录该网站后，首先要注册为会员才能购买图书。该系统的使用者主要分为2类：注册用户和管理员。注册用户除了可以浏览网上商城中的货物信息外，还可以进行网上购物；管理员可以对网上商城中的商品信息进行管理、对客户订单进行处理等。主要包括以下功能模块：前台：（1）用户注册登录；（2）货物查询；（3）货物订购；（4）订单查询；（5）用户信息修改；后台：（1）货物管理；（2）订单管理；（3）用户管理；二、实验数据库三、实验代码Default.aspx                                                Login.aspx  会员姓名：  会员密码：  验   证  码：    Login.aspx.csusing System;using System.Collections.Generic;using System.Linq;using System.Web;using System.Web.UI;using System.Web.UI.WebControls;using System.Data;using System.Data.SqlClient; public partial class login : System.Web.UI.Page protected void Page_Load(object sender, EventArgs e) SqlConnection Conn; Conn = new SqlConnection(Data Source=pc-1230;Initial Catalog=user;Integrated Security=True); /Windows身份验证 if (!IsPostBack) Random randobj = new Random(); labCode.Text = randobj.Next(1000, 10000).ToString();/返回一个指定范围内的随机数(int) protected void btnLogin_Click(object sender, EventArgs e) SqlConnection sqlconn; sqlconn = new SqlConnection(Data Source=pc-1230;Initial Catalog=user;Integrated Security=True); sqlconn.Open(); string sql = select * from member1 where id = id and pwd = pwd; SqlCommand Comm = new SqlCommand(sql, sqlconn); Comm.Parameters.Add(id, txtMName.Text); Comm.Parameters.Add(pwd, txtMPwd.Text); SqlDataReader sdr = Comm.ExecuteReader(); if (txtMCode.Text.Trim() = labCode.Text.Trim() if (sdr.Read() Sessionid = txtMName.Text; if (Sessionid.ToString() != admin) Response.Redirect(SuccReg.aspx); else Response.Redirect(admin.aspx); else Response.Write(alert(您输入的用户名或密码错误，请重新输入！);location=javascript:history.go(-1);); else Response.Write(alert(验证码输入有误，请重新输入！);location=javascript:history.go(-1);); sqlconn.Close(); protected void btnCancle_Click(object sender, EventArgs e) Response.Write(window.close();location=javascript:history.go(-1);); Logon.aspx 用户名   密码    确认密码  生日    电话号码  邮箱    Logon.aspx.csusing System;using System.Data;using System.Data.SqlClient;using System.Configuration;using System.Collections;using System.Web;using System.Web.Security;using System.Web.UI;using System.Web.UI.WebControls;using System.Web.UI.WebControls.WebParts;using System.Web.UI.HtmlControls;public partial class logon : System.Web.UI.Page protected void Page_Load(object sender, EventArgs e) protected void Button2_Click(object sender, EventArgs e) SqlConnection sqlconn; sqlconn = new SqlConnection(Data Source=pc-1230;Initial Catalog=user;Integrated Security=True); string sqlstr = select * from member1 where id= + this.TextBox1.Text + ; sqlconn.Open(); SqlCommand sqlcom = new SqlCommand(sqlstr, sqlconn); SqlDataReader read = sqlcom.ExecuteReader(); read.Read(); if (read.HasRows) if (this.TextBox1.Text.Trim() = readid.ToString().Trim() Response.Write(alert(该会员已经注册过);localtion=Register.aspx); return; else Response.Write(alert(您可以进行正常注册);localtion=Register.aspx); read.Close(); sqlconn.Close(); protected void Button1_Click(object sender, EventArgs e) SqlConnection sqlconn; sqlconn = new SqlConnection(Data Source=pc-1230;Initial Catalog=user;Integrated Security=True); sqlconn.Open(); string sqlstr = insert into member1 + (id,pwd,birth,phone,email) + values( + TextBox1.Text + , + TextBox2.Text + , + TextBox4.Text + , + TextBox5.Text + , + TextBox6.Text + ); SqlCommand Comm = new SqlCommand(sqlstr, sqlconn); Comm.ExecuteNonQuery(); sqlconn.Close(); Sessionid = TextBox1.Text.Trim(); Response.Redirect(SuccReg.aspx); Car.aspx asp:SqlDataSource ID=SqlDataSource2 runat=server ConnectionString= DeleteCommand=DELETE FROM car1 WHERE id = id AND goodsid = goodsid InsertCommand=INSERT INTO car1 (id, goodsid, goodsname, num) VALUES (id, goodsid, goodsname, num) SelectCommand=SELECT * FROM car1 WHERE (id = id) UpdateCommand=UPDATE car1 SET goodsname = goodsname, num = num WHERE id = id AND goodsid = goodsid Admin.aspx asp:SqlDataSource ID=SqlDataSource1 runat=server ConnectionString= DeleteCommand=DELETE FROM goodsinfo WHERE goodsid = goodsid InsertCommand=INSERT INTO goodsinfo (goodsname, goodsid, goodsnum, goodsphoto) VALUES (goodsname, goodsid, goodsnum, goodsphoto) SelectCommand=SELECT * FROM goodsinfo UpdateCommand=UPDATE goodsinfo SET goodsname = goodsname, goodsnum = goodsnum, goodsphoto = goodsphoto WHERE goodsid = goodsid asp:SqlDataSource ID=SqlDataSource2 runat=server ConnectionString= DeleteCommand=DELETE FROM car1 WHERE id = id AND go