using System; using System.Data; using System.Data.Odbc; using System.Configuration; using System.Collections; using System.Web; using System.Web.Security; using System.Web.UI; using System.Web.UI.WebControls; using System.Web.UI.WebControls.WebParts; using System.Web.UI.HtmlControls; public partial class _Default : System.Web.UI.Page { protected void Page_Load(object sender, EventArgs e) { if (Page.IsPostBack) { string strSql = "SELECT UserID FROM UserData WHERE UserID = '" + Request.Form["txtUserName"] + "'"; string result = ""; string strEmail; // Create the connection using the connection string in web.config. OdbcConnection conn = new OdbcConnection(ConfigurationManager.ConnectionStrings["ConnectionString"].ConnectionString); OdbcCommand cmd = new OdbcCommand(strSql, conn); OdbcDataReader rdr; conn.Open(); rdr = cmd.ExecuteReader(); // User already exists. if (rdr.HasRows) lblNameUsed.Visible = true; // New user name add to db and redirect. else { rdr.Close(); // User wishes to receive progress reports via e-mail or not? if (Request.Form["chkEmail"] == "on") strEmail = "true"; else strEmail = "false"; strSql = "INSERT INTO UserData (UserID, Password, ParentEMail, SendReport) " + "VALUES ('" + Request.Form["txtUserName"] + "', '" + Request.Form["txtPassword"] + "', '" + Request.Form["txtEmail"] + "', " + strEmail + ")"; cmd.CommandText = strSql; cmd.ExecuteNonQuery(); conn.Close(); Session["passUser"] = Request.Form["txtUserName"]; Response.Redirect("index.aspx"); } rdr.Close(); conn.Close(); } } }