?using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class User : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
    }
    protected void btnOK_Click(object sender, EventArgs e)
    {
        //獲取傳入的ProductID參數
        string productID = Request["idofproduct"];

        //判斷文本框輸入是否為空
        if (txtName.Text.Trim() == string.Empty)
        {
            txtName.Text = "用戶名為空！";
            return;
        }
        else if (txtPhone.Text.Trim() == string.Empty)
        {
            txtPhone.Text = "電話為空！";
            return;
        }
        else if (txtAddress.Text.Trim() == string.Empty)
        {
            txtAddress.Text = "地址為空！";
            return;
        }
        else
        {
            //連接字符串
            string connectionString = @"Data Source=WWW-C4074C4DF06\SQLEXPRESS;Initial Catalog=Chap22;Integrated Security=True;Pooling=False";

            //建立連接
            SqlConnection myConnection = new SqlConnection(connectionString);

            //打開連接
            myConnection.Open();
            SqlCommand myCommand = myConnection.CreateCommand();

            //插入用戶數據
            string sql = "insert into T_User(username, phone, address) values('" + txtName.Text.Trim() + "','" + txtPhone.Text.Trim() + "','" + txtAddress.Text.Trim() + "')";
            myCommand.CommandText = sql;
            myCommand.ExecuteNonQuery();

            string userid = string.Empty;
            sql = "select max(idofuser) m from t_user";
            myCommand.CommandText = sql;
            SqlDataReader myDataReader = myCommand.ExecuteReader();
            while (myDataReader.Read())
            {
                userid = myDataReader["m"].ToString();
            }
            myDataReader.Close();

            //插入訂單數據
            sql = "insert into T_Order(idofproduct, idofuser) values('" + productID + "','" + userid + "')";
            myCommand.CommandText = sql;
            myCommand.ExecuteNonQuery();


            string orderid = string.Empty;
            sql = "select max(idoforder) m from t_order";
            myCommand.CommandText = sql;
            myDataReader = myCommand.ExecuteReader();
            while (myDataReader.Read())
            {
                orderid = myDataReader["m"].ToString();
            }
            myDataReader.Close();
            myConnection.Close();

            //轉入訂單確認頁面
            Response.Redirect("Order.aspx?orderid=" + orderid);
        }
    }
}