?using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;


public partial class _Default : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }
    protected void TextBox2_TextChanged(object sender, EventArgs e)
    {

    }
    protected void LOGIN_Click(object sender, EventArgs e)
    {
        //建立與數據源的連接

        SqlConnection myconnection = new SqlConnection(ConfigurationManager.AppSettings["ConnectionString"]);
        DBConnection conn = new DBConnection();

        string id = USER.Text.ToString();
        string pass = PASSWORD.Text.ToString();
        string str1 = "";
        string str2 = "";
        if (this.RBL1.Items[0].Selected == true)
        {
            str1 = "教師";
            str2 = "Teacher.aspx";
        }
        if (this.RBL1.Items[1].Selected == true)
        {
            str1 = "學生";
            str2 = "Student.aspx";
        }
        if (this.RBL1.Items[2].Selected == true)
        {
            str1 = "管理員";
            str2 = "bbs.aspx";
        }
        string sql = "select * from yonghu where number='" + id + "'and pwd='" + pass + "'and power='" + str1 + "'";

        SqlDataReader recm = conn.ExecuteReader(sql);
        if (recm.Read())
        {
            Session["uid"] = recm["name"].ToString();
            Session["username"] = recm["username"].ToString();
            Session["email"] = recm["email"].ToString();
            Session["power"] = str1;
            Session["number"] = recm["number"].ToString();
            Page.Response.Redirect(str2);
        }

        else
        {
            label.Text = "學工號或者密碼有錯誤！";
            PASSWORD.Text = "";
        }
    }
    protected void PBACK_Click(object sender, EventArgs e)
    {
        Page.Response.Redirect("Drawback.aspx");   
    }
}