using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
using System.Configuration;

namespace Emplog.main
{
	/// <summary>
	/// updatepass 的摘要說明。
	/// </summary>
	public class updatepass : System.Web.UI.Page
	{
		protected System.Web.UI.WebControls.TextBox newpass;
		protected System.Web.UI.WebControls.RequiredFieldValidator Requiredfieldvalidator1;
		protected System.Web.UI.WebControls.Button Btn_ok;
		protected System.Web.UI.WebControls.Button Btn_cancel;
		protected System.Web.UI.WebControls.Label Lbl_note;
		protected System.Web.UI.HtmlControls.HtmlForm Form1;
		protected System.Web.UI.WebControls.TextBox oldpass;
		protected System.Web.UI.WebControls.RequiredFieldValidator Requiredfieldvalidator2;
		protected System.Web.UI.WebControls.CustomValidator Cv_id;
		SqlConnection cn;
	
		private void Page_Load(object sender, System.EventArgs e)
		{
			// 在此處放置用戶代碼以初始化頁面
			string strconn=ConfigurationSettings.AppSettings["ConnectionString"];
			cn=new SqlConnection(strconn);
		}

		#region Web 窗體設計器生成的代碼
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: 該調用是 ASP.NET Web 窗體設計器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 設計器支持所需的方法 - 不要使用代碼編輯器修改
		/// 此方法的內容。
		/// </summary>
		private void InitializeComponent()
		{    
			this.Cv_id.ServerValidate += new System.Web.UI.WebControls.ServerValidateEventHandler(this.Cv_id_ServerValidate);
			this.Btn_ok.Click += new System.EventHandler(this.Btn_ok_Click);
			this.Btn_cancel.Click += new System.EventHandler(this.Btn_cancel_Click);
			this.Load += new System.EventHandler(this.Page_Load);

		}
		#endregion

		private void Btn_ok_Click(object sender, System.EventArgs e)
		{
			if(Page.IsValid)
			{
				SqlCommand cm=new SqlCommand("Updatepassword",cn);
				cm.CommandType=CommandType.StoredProcedure;

				cm.Parameters.Add(new SqlParameter("@emp_id",SqlDbType.Int,4));
				cm.Parameters["@emp_id"].Value=Session["Emp_id"];

				cm.Parameters.Add(new SqlParameter("@password",SqlDbType.VarChar,50));
				cm.Parameters["@password"].Value=newpass.Text;
			
				
				cm.Connection.Open();
				try
				{
					cm.ExecuteNonQuery();
					Response.Redirect("../default.aspx");
				
				}
				catch(SqlException)
				{
					Lbl_note.Text="修改失敗";
					Lbl_note.Style["color"]="red";
				}
				cm.Connection.Close();
			}
		}

		private void Btn_cancel_Click(object sender, System.EventArgs e)
		{
		Page.Response.Redirect("updatepwd.aspx");
		}
		private void Cv_id_ServerValidate(object source, System.Web.UI.WebControls.ServerValidateEventArgs args)
		{
			cn.Open();
			SqlCommand cm=new SqlCommand("select * from Emp where emp_id=@emp_id and password=@oldpass",cn);
			cm.Parameters.Add("@emp_id",SqlDbType.Int,4);
			cm.Parameters["@emp_id"].Value=Session["Emp_id"];
			cm.Parameters.Add("@oldpass",SqlDbType.Char,10);
			cm.Parameters["@oldpass"].Value=oldpass.Text;
			SqlDataReader dr=cm.ExecuteReader();
			if(dr.Read())
			{
				args.IsValid=true;
			}
			else
			{
				args.IsValid=false;
			}
			cn.Close();
		}
	}
}