?using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Data.OleDb;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.IO;
using System.Data.SqlClient;

public partial class Admin_Admin_About : System.Web.UI.Page
{

    OleDbConnection MyConn;
    protected void Page_Load(object sender, EventArgs e)
    {
        if (Session["UserID"] == "" || Session["UserID"] == null)
        {
            Response.Write("<script language=javascript>window.alert('為了系統安全，請您重新登陸');window.location.href=('Admin_Login.aspx')</script>");
        }
        if (!IsPostBack)
        {
            this.DataToBind();
        }
    }
    protected void BtnSubmit_Click(object sender, EventArgs e)
    {
            MyConn = DB.CreateDB();
            MyConn.Open();
            string content =FunStr(this.TxtContent.Text);
            OleDbCommand cmd1 = new OleDbCommand("Update about set About='" + content + "'", MyConn);
            cmd1.ExecuteNonQuery();
            Response.Write("<script>alert('企業簡介更新成功');window.location.href='Admin_About.aspx'</script>");
            MyConn.Close();
    }
    public void DataToBind()
    {
        MyConn = DB.CreateDB();
        MyConn.Open();
        OleDbCommand cmd = new OleDbCommand("select * from about", MyConn);
        OleDbDataReader dr = cmd.ExecuteReader();
        while (dr.Read())
        {
            this.TxtContent.Text = dr["about"].ToString();
        }
        dr.Close();
        MyConn.Close();
    }
    public static string FunStr(string str)
    {
        //str = str.Replace("&", "&amp;");
        //str = str.Replace("<", "&lt;");
        //str = str.Replace(">", "&gt");
        str = str.Replace("'", "‘");
        //str = str.Replace("*", "");
        //str = str.Replace("\n", "<br/>");
        //str = str.Replace("\r\n", "<br/>");
        //str   =   str.Replace("?","");   
        //str = str.Replace("select", "");
        //str = str.Replace("insert", "");
        //str = str.Replace("update", "");
        //str = str.Replace("delete", "");
        //str = str.Replace("create", "");
        //str = str.Replace("drop", "");
        //str = str.Replace("delcare", "");
        str = str.Replace("   ", "&nbsp;");

        str = str.Trim();
        if (str.Trim().ToString() == "")
            str = "無";
        return str;
    } 

}