?using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class admin_adminUsersAdd : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
        if (Session["admin"] == null)
            Response.Redirect("adminLogin.aspx");
    }
    protected void btnAdd_Click(object sender, EventArgs e)
    {
        string username = Server.HtmlEncode(tb_username.Text.ToString());
        string password = Server.HtmlEncode(FormsAuthentication.HashPasswordForStoringInConfigFile
            (tb_password.Text.ToString(), "SHA1"));
        string loginip = Request.UserHostAddress;
        DateTime logintime = DateTime.Now;
        if (username.Length > 0)
        {
            string strconn = ConfigurationManager.ConnectionStrings["dsn"].ToString();
            SqlConnection cn = new SqlConnection(strconn);
            cn.Open();
            string sql = "insert into admin_user(username,password,loginip,logintime)";
            sql += "values('" + username + "','" + password + "',";
            sql += "'" + loginip + "','" + logintime + "')";

            SqlCommand cm = new SqlCommand(sql, cn);
            cm.ExecuteNonQuery();
            cn.Close();
            tb_username.Text = "";
        }

    }
}