protected void Invia_Click(object sender, EventArgs e)
{
string source = "Data Source=.\\SQLExpress;Integrated Security=True;User Instance=True;AttachDBFilename=|DataDirectory|Data base.mdf";
string sql = "INSERT INTO Utenti (nome,cognome,Username,Password,email) VALUES (@nome,@cognome,@Username,@Password,@email)";
SqlConnection conn = new SqlConnection(source);
try
{
conn.Open();
SqlCommand cmd = new SqlCommand(sql, conn);
cmd.Parameters.Add("@nome", SqlDbType.NVarChar, 50).Value = nome.Text;
cmd.Parameters.Add("@cognome", SqlDbType.NVarChar, 50).Value = cognome.Text;
cmd.Parameters.Add("@Username", SqlDbType.NVarChar, 50).Value = Username.Text;
cmd.Parameters.Add("@Password", SqlDbType.NVarChar, 50).Value = FormsAuthentication.HashPasswordForStoringInConfig File(Password.Text, "SHA1");
cmd.Parameters.Add("@email", SqlDbType.NVarChar, 50).Value = email.Text;
cmd.ExecuteNonQuery();
Invia.Load += new EventHandler(verifica);
}
catch (SqlException sqle)
{
string c = sqle.Message;
Response.Write("Errore durante un tentativo di connessione al database");
Response.End();
}
finally
{
conn.Close();
Session.Add("Username", Username.Text);
Session.Add("Password", Password.Text);
}
}
public void verifica(object sender, EventArgs e)
{
string source = "Data Source=.\\SQLExpress;Integrated Security=True;User Instance=True;AttachDBFilename=|DataDirectory|Data base.mdf";
string sql = "SELECT * FROM utenti WHERE Username = @Username";
SqlConnection conn = new SqlConnection(source);
try
{
conn.Open();
SqlCommand cmd = new SqlCommand(sql, conn);
cmd.Parameters.Add("@Username", SqlDbType.NVarChar, 50).Value = Username.Text;
SqlDataReader dr;
dr = cmd.ExecuteReader();
if (dr.Read())
{
Label1.Text = "Username già esistente";
Invia.Enabled = false;
}
else
{
Label1.Text = "Username disponibile";
Invia.Enabled = true;
}
}
catch (SqlException sqle)
{
string c = sqle.Message;
Response.Write("Errore durante un tentativo di connessione al database");
Response.End();
}
finally
{
conn.Close();
//Response.Redirect("~/Result.aspx");
}
}