using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
using lalablog;
public partial class admin_adminReplyEdit : System.Web.UI.Page
{
    int replyid;
    protected void Page_Load(object sender, EventArgs e)
    {
        if (Convert.ToInt32(Session["user_level"].ToString()) != 3)
        {
            myfunc m1 = new myfunc("您不是前臺管理員!");
            Response.Write(m1.JavaMsg("user_manage_reply.aspx"));
        }

        replyid = Convert.ToInt32(Request.QueryString["replyid"]);

        if (!IsPostBack) getReply();
    }

    private string getReply()
    {
        string strconn = ConfigurationManager.ConnectionStrings["dsn"].ToString();
        SqlConnection cn = new SqlConnection(strconn);
        string sql = "select title,text from reply where replyid=" + replyid;

        try
        {
            cn.Open();
            SqlCommand cm = new SqlCommand(sql, cn);
            SqlDataReader dr = cm.ExecuteReader();

            if (dr.Read())
            {
                editor.InnerHtml = dr["text"].ToString();
                tb_title.Text = dr["title"].ToString();
            }
            return "success";
        }
        catch (SqlException ex)
        {
            return ex.Message;
        }
        finally { cn.Close(); }
    }

    private void setReply()
    {
        decode blogtitle = new decode(tb_title.Text.ToString());
        string title = Server.HtmlEncode(blogtitle.outstr());

        decode blogtext = new decode(hf_editor.Value);
        string text = blogtext.outstr();

        string strconn = ConfigurationManager.ConnectionStrings["dsn"].ToString();
        SqlConnection cn = new SqlConnection(strconn);
        string sql = "update reply set title='" + title + "',text='" + text + "' where replyid=" + replyid;

        try
        {
            cn.Open();
            SqlCommand cm = new SqlCommand(sql, cn);
            cm.ExecuteNonQuery();
            Response.Redirect("adminReply.aspx");
        }
        catch (SqlException ex)
        {

        }
        finally { cn.Close(); }
    }
    protected void btn_save_Click(object sender, EventArgs e)
    {
        setReply();
    }
}