?using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class admin_adminFriendLink : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
        if (Session["admin"] == null)
            Response.Redirect("adminLogin.aspx");
    }
    protected void btnAdd_Click(object sender, EventArgs e)
    {
        string about = Server.HtmlEncode(tb_about.Text);
        string http = Server.HtmlEncode(tb_http.Text);

        if (about.Length > 0 && http.Length > 5)
        {
            string strconn = ConfigurationManager.ConnectionStrings["dsn"].ToString();
            SqlConnection cn = new SqlConnection(strconn);
            cn.Open();

            string sql = "insert into blogfriendlink ([about],[http]) values('" + about + "','" + http + "')";
            SqlCommand cm = new SqlCommand(sql, cn);
            try
            {
                cm.ExecuteNonQuery();
                GridView1.DataBind();
            }
            catch (SqlException ex)
            {
                msg.InnerHtml = ex.Message ;
            }
            finally
            {
                cn.Close();
                tb_about.Text = "";
                tb_http.Text = "";
                GridView1.DataBind();
            }
        }
    }
}