?using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
using lalablog;
public partial class user_user_subject : System.Web.UI.Page
{
    int userid;
    protected void Page_Load(object sender, EventArgs e)
    {
        if (Session["userid"] == null)
            Response.Redirect("~/user/userLogin.aspx?url="+Server .HtmlEncode(Request .RawUrl ));
        else userid = Convert.ToInt32(Session["userid"].ToString());
    }


    protected void btnAdd(object sender, EventArgs e)
    {
        string subject = Server.HtmlEncode(tb_subject.Text);

        string strconn = ConfigurationManager.ConnectionStrings["dsn"].ToString();
        SqlConnection cn = new SqlConnection(strconn);
        cn.Open();

        string sql = "insert into subject ([name],[userid]) values('" + subject + "'," + userid + ")";
        SqlCommand cm = new SqlCommand(sql, cn);
        try
        {
            cm.ExecuteNonQuery();
            myfunc my = new myfunc("success");
            msg.InnerHtml = my.JavaMsg();

        }
        catch (SqlException ex)
        {
            myfunc my = new myfunc(ex.Message);
            msg.InnerHtml = my.JavaMsg();
        }
        finally
        {
            cn.Close();
            tb_subject.Text = "";
            GridView1.DataBind();
        }
 
    }
}