GraduationProject

using System; using System.Collections.Generic; using System.Text; using GraduationProject.Models; using GraduationProject.DAL; namespace GraduationProject.BLL { public static partial class UserManager { public static User AddUser(User user) { return UserService.AddUser(user); } public static void DeleteUser(User user) { UserService.DeleteUser(user); } public static void DeleteUserById(int id) { UserService.DeleteUserById(id); } public static void ModifyUser(User user) { UserService.ModifyUser(user); } public static IList<User> GetAllUsers() { return UserService.GetAllUsers(); } public static User GetUserById(int id) { return UserService.GetUserById(id); } public static User GetUserByLoginId(string username) { return UserService.GetUserByLoginId(username); } } } using System; using System.Collections.Generic; using System.Text; using System.Data; using System.Data.SqlClient; using GraduationProject.Models; namespace GraduationProject.DAL { public static partial class UserService { /// <summary> /// 添加新用户 /// </summary> /// <param name="user"></param> /// <returns></returns> public static User AddUser(User user) { string sql = "INSERT Users (username,password,pswquestion,pswanswer,email,truename,sex,phone,cardno,provinces,postalcode,address)" + "VALUES (@username,@password,@pswquestion,@pswanswer,@email,@truename,@sex,@phone,@cardno,@provinces,@postalcode,@address)"; sql += " ; SELECT @@IDENTITY"; SqlParameter[] para = new SqlParameter[] { new SqlParameter("@username", user.UserName), new SqlParameter("@password", user.Password), new SqlParameter("@pswquestion", user.PswQuestion), new SqlParameter("@pswanswer", user.PswAnswer), new SqlParameter("@email", user.Email), new SqlParameter("@truename", user.TrueName), new SqlParameter("@sex", user.Sex), new SqlParameter("@phone", user.Phone), new SqlParameter("@cardno", user.CardNo), new SqlParameter("@provinces", user.Provinces), new SqlParameter("@postalcode", user.Postalcode), new SqlParameter("@address", user.Address), }; int newId = DBHelper.GetScalar(sql, para); return GetUserById(newId); } /// <summary> /// 删除用户 /// </summary> /// <param name="user"></param> public static void DeleteUser(User user) { DeleteUserById(user.Id); } /// <summary> /// 根据id删除用户 /// </summary> /// <param name="id"></param> public static void DeleteUserById(int id) { string sql = @"DELETE Orders where id=@id DELETE Users WHERE Id = @id"; SqlParameter[] para = new SqlParameter[] { new SqlParameter("@id", id) }; DBHelper.ExecuteCommand(sql, para); } /* /// <summary> /// 根据登录名删除用户 /// </summary> /// <param name="loginId"></param> [Obsolete] public static void DeleteUserByLoginId(string loginId) { string sql = "DELETE Users WHERE LoginId = @LoginId"; SqlParameter[] para = new SqlParameter[] { new SqlParameter("@LoginId", loginId) }; DBHelper.ExecuteCommand(sql, para); } **/ /// <summary> /// 修改用户信息 /// </summary> /// <param name="user"></param> public static void ModifyUser(User user) { string sql = "UPDATE Users " + "SET " + "username=@username, " + "password = @password, " + "pswquestion= @pswquestion, " + "pswanswer = @pswanswer, " + "email = @email, " + "truename = @truename, " + "sex = @sex, " + "phone = @phone," + "cardno=@cardno,"+ "provinces=@provinces,"+ "address=@address,"+ "grade=@grade,"+ "WHERE username = @username"; SqlParameter[] para = new SqlParameter[] { new SqlParameter("@username", user.UserName), new SqlParameter("@password", user.Password), new SqlParameter("@pswquestion", user.PswQuestion), new SqlParameter("@pswanswer", user.PswAnswer), new SqlParameter("@email", user.Email), new SqlParameter("@truename", user.TrueName), new SqlParameter("@sex", user.Sex), new SqlParameter("@phone", user.Phone), new SqlParameter("@cardno", user.CardNo), new SqlParameter("@provinces", user.Provinces), new SqlParameter("@postalcode", user.Postalcode), new SqlParameter("@address", user.Address), new SqlParameter("@grade", user.Grade) }; DBHelper.ExecuteCommand(sql, para); } /// <summary> /// 查询所有用户 /// </summary> /// <returns></returns> public static IList<User> GetAllUsers() { string sqlAll = "SELECT * FROM Users"; return GetUsersBySql(sqlAll); } /// <summary> /// 根据id查询单个用户 /// </summary> /// <param name="id"></param> /// <returns></returns> public static User GetUserById(int id) { string sql = "SELECT * FROM Users WHERE id = @id"; using (SqlDataReader reader = DBHelper.GetReader(sql, new SqlParameter("@id", id))) { if (reader.Read()) { User user = new User(); user.Id = (int)reader["id"]; user.UserName=(string)reader["username"]; user.Password = (string)reader["password"]; user.PswQuestion = (string)reader["pswquestion"]; user.PswAnswer = (string)reader["pswanswer"]; user.Email=(string)reader["email"]; user.TrueName = (string)reader["truename"]; user.Sex = (string)reader["sex"]; user.Phone = (string)reader["phone"]; user.CardNo = (string)reader["cardno"]; user.Provinces = (string)reader["provinces"]; user.Postalcode = (string)reader["postalcode"]; user.Address = (string)reader["address"]; user.Grade = (string)reader["grade"]; reader.Close(); return user; } else { reader.Close(); return null; } } } /// <summary> /// 根据登录名查询用户 /// </summary> /// <param name="loginId"></param> /// <returns></returns> public static User GetUserByLoginId(string username) { string sql = "SELECT * FROM Users WHERE username=@username"; using (SqlDataReader reader = DBHelper.GetReader(sql, new SqlParameter("@username",user