?using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
using lalablog;

public partial class user_user_edit_reply : System.Web.UI.Page
{
    int userid, replyid;
    protected void Page_Load(object sender, EventArgs e)
    {
        if (Session["userid"] == null)
            Response.Redirect("~/user/userLogin.aspx?url="+Server .HtmlEncode(Request .RawUrl ));
        else userid = Convert.ToInt32(Session["userid"]);

        replyid = Convert.ToInt32(Request.QueryString["replyid"]);

        if (!IsPostBack)        getReply();
    }

    private string  getReply()
    {
        string strconn = ConfigurationManager.ConnectionStrings["dsn"].ToString();
        SqlConnection cn = new SqlConnection(strconn);
        string sql = "select title,text from reply where replyid=" + replyid +" and userid="+userid ;

        try
        {
            cn.Open();
            SqlCommand cm = new SqlCommand(sql, cn);
            SqlDataReader dr = cm.ExecuteReader();

            if (dr.Read())
            {
                editor.InnerHtml = dr["text"].ToString();
                tb_title.Text = dr["title"].ToString();
            }
            return "success";
        }
        catch (SqlException ex)
        {
            return ex.Message;
        }
        finally { cn.Close(); }
    }

    private void setReply()
    {
        decode blogtitle = new decode(tb_title.Text.ToString());
        string title = Server.HtmlEncode(blogtitle.outstr());

        decode blogtext = new decode(hf_editor.Value);
        string text = blogtext.outstr();

        string strconn = ConfigurationManager.ConnectionStrings["dsn"].ToString();
        SqlConnection cn = new SqlConnection(strconn);
        string sql = "update reply set title='"+title +"',text='"+text +"' where replyid=" + replyid + " and userid=" + userid;

        try
        {
            cn.Open();
            SqlCommand cm = new SqlCommand(sql, cn);
            cm.ExecuteNonQuery();
            Response .Redirect( "user_manage_reply.aspx");
         }
        catch (SqlException ex)
        {
            
        }
        finally { cn.Close(); }
    }
    protected void btn_save_Click(object sender, EventArgs e)
    {
        setReply();
    }
}