?using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class _Default : System.Web.UI.Page
{
    private static string connstr = "Server=localhost;Database=Materialsystem;User ID=sa";
    SqlConnection loginconn;
    SqlCommand logincomm,managercomm;
    SqlDataReader result;
    protected void Page_Load(object sender, EventArgs e)
    {

    }
    protected void LoginButton_Click(object sender, EventArgs e)
    {
        string loginstr = "SELECT Snum FROM Cardinfo WHERE Cardnum='"+CardnumTextBox.Text.ToString().Trim()+"' AND Cardpwd='"+CardpwdTextBox.Text.ToString().Trim()+"'";
        string managerstr = "SELECT Managernum,Managername FROM Managerinfo WHERE Managernum='" + CardnumTextBox.Text.ToString().Trim() + "' AND Managerpwd='" + CardpwdTextBox.Text.ToString().Trim() + "'";
        loginconn = new SqlConnection();
        loginconn.ConnectionString = connstr;
        logincomm = new SqlCommand();
        logincomm.CommandText = loginstr;
        logincomm.Connection = loginconn;
        managercomm = new SqlCommand();
        managercomm.CommandText = managerstr;
        managercomm.Connection = loginconn;
        try
        {
            //如果是管理員，則跳轉到管理員頁面
            if (CardnumTextBox.Text.ToString().Trim() == "M1000000" || CardnumTextBox.Text.ToString().Trim() == "M1000001")
            {
                //打開數據庫連接,測試數據庫是否打開成功
                if (loginconn.State == ConnectionState.Closed)
                {
                    loginconn.Open();
                }
                //獲取運行結果
                result = managercomm.ExecuteReader(CommandBehavior.CloseConnection);
                if (result.Read())
                {
                    //獲取管理員編號和姓名的session變量
                    Session["managernum"] = result[0].ToString();
                    Session["managername"] = result[1].ToString(); 
                    result.Close();
                    loginconn.Open();

                    //登錄成功，跳轉到Manager.aspx
                    Response.Redirect("../Manager/Management.aspx");
                }
                else
                {
                    Response.Write("<script>alert('用戶名或密碼錯誤！')</script>");
                }   
            }
            //如果是職工，處理職工登錄信息
            else
            {
                    //打開數據庫連接,測試數據庫是否打開成功
                    if (loginconn.State == ConnectionState.Closed)
                    {
                        loginconn.Open();
                    }
                    //獲取運行結果
                    result = logincomm.ExecuteReader(CommandBehavior.CloseConnection);
                    if (result.Read())
                    {
                        //設置職工號的的全局Session變量
                        string mystr = result[0].ToString();
                        result.Close();
                        loginconn.Open();
                        string getnamestr = "SELECT Snum,Sname FROM Studentinfo WHERE Snum='" + mystr + "'";
                        SqlCommand stucomm = new SqlCommand(getnamestr,loginconn);
                        SqlDataReader stureader = stucomm.ExecuteReader(CommandBehavior.CloseConnection);
                        if (stureader.Read())
                        {
                            Session["studentnumber"] = stureader[0].ToString();
                            Session["studentname"] = stureader[1].ToString();
                            stureader.Close();
                        }
                        //登錄成功，跳轉到Manager.aspx
                        Response.Redirect("../Mainbody/BorrowReturn.aspx");
                    }
                    else
                    {
                        Response.Write("<script>alert('用戶名或密碼錯誤！')</script>");
                    }
            }
        }
        catch (Exception ex)
        {
            throw ex;
        }
        finally
        {
            //關閉數據庫連接
            if (loginconn.State == ConnectionState.Open)
            {
                loginconn.Close();
            }
        }
    }
    protected void CancelButton_Click(object sender, EventArgs e)
    {
        Response.Write("<script language:javascript>javascript:window.close();</script>");
    }
    protected void RegisterButton_Click(object sender, EventArgs e)
    {
        Response.Redirect("../Register.aspx");
    }
}