?using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.OleDb;

public partial class _Default : System.Web.UI.Page 
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }

    protected void testlogbtn_Click(object sender, EventArgs e)
    {
        string username = usernametxt.Text.Trim();
        string password = pawtxt.Text.Trim();
        string connecionstring =(string)Application["connectstring"];
        OleDbConnection conn = new OleDbConnection(connecionstring);
        try
        {
            bool flag=false;
            conn.Open();
            string commandtext = "select distinct *  from student where studentname='" + username + "' and paw='" + password + "'";
            OleDbCommand checkcommand = new OleDbCommand(commandtext, conn);
            OleDbDataReader dr = checkcommand.ExecuteReader();
            flag = dr.HasRows;
            if (flag)
            {
                Session.Add("username", username);
                Session.Add("logintime", System.DateTime.Now.ToLongTimeString());
                conn.Close();
                Response.Redirect("test.aspx");
            }
            else
            {
                lblmessage.Text = "用戶名或密碼錯誤，請重新登陸！";
                usernametxt.Text = "";
                pawtxt.Text = "";
            }

        }
        catch (Exception err)
        {
            Response.Write(err.Message);
            //Response.Redirect("error.aspx");
        }
        finally
        {
            if (conn.State == ConnectionState.Open)
                conn.Close();
        }
       
    }

    protected void adminlogbtn_Click(object sender, EventArgs e)
    {
        string username = usernametxt.Text.Trim();
        string password = pawtxt.Text.Trim();
        string connecionstring = (string)Application["connectstring"];
        OleDbConnection conn = new OleDbConnection(connecionstring);
        try
        {
            bool flag = false;
            conn.Open();
            string commandtext = "select distinct *  from admin where name='" + username + "' and password='" + password + "'";
            OleDbCommand checkcommand = new OleDbCommand(commandtext, conn);
            OleDbDataReader dr = checkcommand.ExecuteReader();
            flag = dr.HasRows;
            if (flag)
            {
                Session.Add("username", username);
                Session.Add("logintime", System.DateTime.Now.ToLongTimeString());
                Session.Add("role", "adminstrator");
                conn.Close();
                Response.Redirect("guanli.aspx");
            }
            else
            {
                lblmessage.Text = "用戶名或密碼錯誤，請重新登陸！";
                usernametxt.Text = "";
                pawtxt.Text = "";
            }

        }
        catch (Exception err)
        {
            Response.Write(err.Message);
            //Response.Redirect("error.aspx");
        }
        finally
        {
            if (conn.State == ConnectionState.Open)
                conn.Close();
        }
    }
 
}