電子商務(wù)與安全課程設(shè)計

1、電子商務(wù)與安全課程設(shè)計1 設(shè)計思想：隨著internet的發(fā)展和普及，電子商務(wù)在人們的生活中的角色越來越重要。以互聯(lián)網(wǎng)為依托的電子商務(wù)，可以方便商家和消費者。本課程設(shè)計利用vs2010開發(fā)環(huán)境和asp.net語言，設(shè)計實現(xiàn)了一個簡單的電子商務(wù)網(wǎng)站。asp.net的運行環(huán)境：win7+iis+vs2010。數(shù)據(jù)庫采用microsfot sql server 2008?？梢詫崿F(xiàn)簡單的在線購物以及后臺管理功能。通過配置本地服務(wù)器，可以實現(xiàn)上線運營。2 網(wǎng)站功能：1 會員注冊功能。網(wǎng)購的第一步是注冊帳號。只有在注冊帳號之后才能選購商品，結(jié)帳。2 登陸功能。注冊之后，網(wǎng)站為用戶在數(shù)據(jù)庫中記錄信息，登陸之

2、后就可以連接到數(shù)據(jù)庫，從而可以將購物信息存儲到數(shù)據(jù)庫，同時可以使用會員信息查詢功能，查看會員的購物記錄，消費金額等。3 會員管理功能。會員登錄之后可以通過此功能修改個人信息。4 商品信息查詢。會員可以按商品所屬類別、所屬倉庫、商品名稱查看商品的詳細(xì)信息。同時可以選則購買商品，點擊購買商品后該商品自動加入到購物車中。5 購物車功能。會員可以在購物車中查看已經(jīng)買到的商品，刪除不想購買的商品。點擊結(jié)帳后可以完成購物。點擊清空購物車，可以刪除所有添加到購物車中的商品。6 購物信息查詢功能。會員可以輸入自己的id查看自己的購物記錄。7 后臺管理功能。登陸管理員帳戶，可以實現(xiàn)商品管理、會員管理、倉庫管理、

3、訂單管理、修改管理員帳戶信息等功能。3 功能的具體實現(xiàn)1. defailt.aspx:網(wǎng)站的整體布局源碼：網(wǎng)站的整體布局public partial class _default : system.web.ui.page protected void page_load(object sender, eventargs e) 2.會員注冊功能：membermanage/regpro.aspx主要源碼： 威海市 /所在城市設(shè)置/地址/郵編/會員充值public partial class membermanage_regpro : system.web.ui.page protected voi

4、d page_load(object sender, eventargs e) protected void btnagree_click(object sender, eventargs e) response.redirect(register.aspx); protected void btnrefuse_click(object sender, eventargs e) response.redirect(goodsinfo.aspx); 3. 購物車功能：主要源碼：結(jié)賬?/結(jié)帳功能清?空?購o物?車/清空購物車public partial class membermanage_sho

5、pping : system.web.ui.page sqloperate sqloperate = new sqloperate(); sqlconnection sqlconn = new sqlconnection(configurationmanager.appsettingsconnectionstring); protected void page_load(object sender, eventargs e) if (sessionmname = null) response.write(alert(您還沒有登錄，請登錄后再使用該功能!);location=javascript

6、:history.go(-1);); if (!ispostback) string sqlstr = select orderid,goodsname,goodstypename,goodsprice from tb_orderinfo where ordermember= +convert.tostring(sessionmname) + and ischeckout=否; gvorderinfo.datakeynames = new string orderid ; sqloperate.gvdatabind(gvorderinfo, sqlstr); string sqlstrtpri

7、ce = select sum(goodsprice) as tprice from tb_orderinfo + where ordermember= + convert.tostring(sessionmname) + and ischeckout=否; sqlconn.open(); sqldataadapter myda = new sqldataadapter(sqlstrtprice, sqlconn); dataset myds = new dataset(); myda.fill(myds, tb_orderinfo); datarowview mydrv = myds.tab

8、lestb_orderinfo.defaultview0; labmoney.text = convert.tostring(mydrv.rowtprice); protected void lbtncheck_click(object sender, eventargs e) if (labmoney.text = ) response.write(alert(您的購物車中沒有任何物品);); else string sqlstr = select membername,membermoney from tb_member where membername= + sessionmname.t

9、ostring() + ; sqlconn.open(); sqldataadapter myda = new sqldataadapter(sqlstr, sqlconn); dataset myds = new dataset(); myda.fill(myds, tb_member); datarowview mydrv = myds.tablestb_member.defaultview0; string mprice = convert.tostring(mydrv.rowmembermoney); if (convert.toint32(mprice) convert.toint3

10、2(labmoney.text.trim() response.write(alert(您的余額不足，請重新充值后再購買！);); else string sqlstrshop1 = update tb_member set membermoney= + (convert.toint32(mprice) - convert.toint32(labmoney.text) + where membername= + sessionmname.tostring() + ; sqloperate.datacom(sqlstrshop1); string sqlstrshop2 = update tb_

11、orderinfo set ischeckout=是 where ordermember= + sessionmname.tostring() + ; sqloperate.datacom(sqlstrshop2); response.redirect(succshop.aspx); protected void lbtnclear_click(object sender, eventargs e) string sqlstr = delete from tb_orderinfo where ordermember= + sessionmname.tostring() + and ischec

12、kout=否; sqloperate.datacom(sqlstr); response.redirect(shopping.aspx); protected void gvorderinfo_pageindexchanging(object sender, gridviewpageeventargs e) gvorderinfo.pageindex = e.newpageindex; gvorderinfo.databind(); protected void gvorderinfo_rowdatabound(object sender, gridviewroweventargs e) if

13、 (e.row.rowtype = datacontrolrowtype.datarow) (linkbutton)(e.row.cells3.controls0).attributes.add(onclick, return confirm(確定要刪除嗎？); protected void gvorderinfo_rowdeleting(object sender, gridviewdeleteeventargs e) string sqlstr = delete from tb_orderinfo where orderid= + gvorderinfo.datakeyse.rowinde

14、x.value + ; sqloperate.datacom(sqlstr); response.redirect(shopping.aspx); 4. 購物信息查詢源碼：public partial class membermanage_orderinfo : system.web.ui.page sqloperate sqloperate = new sqloperate(); sqlconnection sqlconn = new sqlconnection(configurationmanager.appsettingsconnectionstring); protected void

15、 page_load(object sender, eventargs e) if (!ispostback) protected void txtsel_click(object sender, eventargs e) if (sessionmname = null) response.write(alert(您還沒有登錄，請登錄后再使用，謝謝！);location=javascript:history.go(-1);); else this.gvbind(); protected void gvshopinfo_pageindexchanging(object sender, gridv

16、iewpageeventargs e) gvshopinfo.pageindex = e.newpageindex; this.gvbind(); public void gvbind() string sqlstr = select memberid,membername from tb_member where memberid= + txtmid.text.trim() + ; sqlconn.open(); sqlcommand sqlcom = new sqlcommand(sqlstr,sqlconn); int count = convert.toint32(sqlcom.exe

17、cutescalar(); if (count 0) sqldataadapter myda = new sqldataadapter(sqlstr, sqlconn); dataset myds = new dataset(); myda.fill(myds, tb_member); datarowview mydrv = myds.tablestb_member.defaultview0; string sqlstrbind = select * from tb_orderinfo where ordermember= + convert.tostring(mydrv.rowmembern

18、ame) + ; sqlcommand com = new sqlcommand(sqlstrbind,sqlconn); int countinfo = convert.toint32(com.executescalar(); if (countinfo 0) sqloperate.gvdatabind(gvshopinfo, sqlstrbind); else gvshopinfo.visible = false; response.write(alert(沒有該會員購物信息); else response.write(alert(沒有該用戶，請您重新輸入！);location=javas

19、cript:history.go(-1);); 5. 后臺管理功能：登錄源碼：1.登錄：public partial class adminmanage_login : system.web.ui.page protected void page_load(object sender, eventargs e) if (!ispostback) random randobj = new random(); labcode.text = randobj.next(1000, 10000).tostring(); protected void imagebutton1_click(object s

20、ender, imageclickeventargs e) sqlconnection sqlconn = new sqlconnection(configurationmanager.appsettingsconnectionstring); sqlconn.open(); sqlcommand sqlcom = new sqlcommand(proadmininfo, sqlconn); sqlcom.commandtype = commandtype.storedprocedure; sqlcom.parameters.add(adminname, sqldbtype.varchar,

21、20).value = txtadminname.text.trim(); sqlcom.parameters.add(adminpwd, sqldbtype.varchar, 20).value = txtadminpwd.text.trim(); sqldatareader read = sqlcom.executereader(); if (txtadmincode.text.trim() = labcode.text.trim() if (read.read() /response.write(windows.open(adminindex.aspx);); response.redi

22、rect(adminindex.aspx); else response.write(alert(您輸入的用戶名或密碼錯誤，請重新輸入！);location=javascript:history.go(-1);); else response.write(alert(驗證碼輸入有誤，請重新輸入！);location=javascript:history.go(-1);); protected void imagebutton2_click(object sender, imageclickeventargs e) response.write(window.close();location=j

23、avascript:history.go(-1);); 2. 后臺管理：1.管理員添加或者刪除：public partial class adminmanage_editadmin : system.web.ui.page sqlconnection sqlconn = new sqlconnection(configurationmanager.appsettingsconnectionstring); sqloperate sqloperate = new sqloperate(); protected void page_load(object sender, eventargs e)

24、if (!ispostback) txtaid.text = requestadminid.tostring(); string sqlstr = select * from tb_admin where adminid=+requestadminid.tostring()+; sqlconn.open(); sqldataadapter myda = new sqldataadapter(sqlstr,sqlconn); dataset myds = new dataset(); myda.fill(myds,tb_admin); datarowview mydrv=myds.tablest

25、b_admin.defaultview0; txtaname.text = convert.tostring(mydrv.rowadminname); txtapwd.text = convert.tostring(mydrv.rowadminpwd); sqlconn.close(); protected void btnadd_click(object sender, eventargs e) string sqltest = select * from tb_admin where adminname= + txtaname.text + ; sqlconn.open(); sqlcom

26、mand sqlcom = new sqlcommand(sqltest, sqlconn); sqldatareader read = sqlcom.executereader(); read.read(); if (read.hasrows) if (this.txtaname.text.trim() = readadminname.tostring().trim() response.write(alert(該管理員已經(jīng)存在);localtion=editadmin.aspx); return; else string sqlstr = insert into tb_admin(admi

27、nname,adminpwd) + values( + txtaname.text.trim() + , + txtapwd.text.trim() + ); sqloperate.datacom(sqlstr); response.write(alert(添加成功);location=adminmanage.aspx;); protected void btnedit_click(object sender, eventargs e) string sqlstr = update tb_admin set adminname=+txtaname.text.trim() +,adminpwd=

28、+txtapwd.text.trim()+ where adminid=+requestadminid.tostring()+; sqloperate.datacom(sqlstr); response.write(alert(修改成功);location=adminmanage.aspx;); protected void btnback_click(object sender, eventargs e) response.redirect(adminmanage.aspx); 2. 商品管理：public partial class adminmanage_editgoods : syst

29、em.web.ui.page sqloperate sqloperate = new sqloperate(); sqlconnection sqlconn = new sqlconnection(configurationmanager.appsettingsconnectionstring); protected void page_load(object sender, eventargs e) sqlconn.open(); if (!ispostback) string sqlstr = select * from tb_goodstype; sqloperate.ddldatabi

30、nd(ddlgtype, sqlstr, goodstypename); string sqlstrshow = select * from tb_goodsinfo where goodsid=+requestgoodsid.tostring()+; sqldataadapter myapter = new sqldataadapter(sqlstrshow,sqlconn); dataset mydset = new dataset(); myapter.fill(mydset,tb_goodsinfo); datarowview mydrview=mydset.tablestb_good

31、sinfo.defaultview0; txtgname.text = convert.tostring(mydrview.rowgoodsname); txtgprice.text = convert.tostring(mydrview.rowgoodsprice); txtgintroduce.text = convert.tostring(mydrview.rowgoodsintroduce); imgphoto.imageurl = convert.tostring(mydrview.rowgoodsphoto); string sqlstrimg = select image fro

32、m tb_image; sqloperate.ddldatabind(ddlphoto,sqlstrimg,image); string strgid; strgid = convert.tostring(mydrview.rowgoodstypeid); string sqlstrbind = select * from tb_goodstype where goodstypeid= + strgid + ; sqldataadapter myda = new sqldataadapter(sqlstrbind, sqlconn); dataset myds = new dataset();

33、 myda.fill(myds, tb_goodstype); datarowview mydrv = myds.tablestb_goodstype.defaultview0; ddlgtype.selectedvalue = convert.tostring(mydrv.rowgoodstypename); sessiongid = strgid; if (convert.tostring(mydrview.rowgoodsisnew).trim() = 是) cbisnew.checked = true; else cbisnew.checked = false; sqlconn.clo

34、se(); protected void btnadd_click(object sender, eventargs e) string sqltest = select * from tb_goodsinfo where goodsname= + this.txtgname.text + ; sqlconn.open(); sqlcommand sqlcom = new sqlcommand(sqltest, sqlconn); sqldatareader read = sqlcom.executereader(); read.read(); if (read.hasrows) if (th

35、is.txtgname.text.trim() = readgoodsname.tostring().trim() response.write(alert(該商品已經(jīng)存在);localtion=editgoods.aspx); return; else read.close(); goodsid(); if (cbisnew.checked = true) string sqlstr = insert into tb_goodsinfo + (goodsname,goodsprice,goodstypeid,goodsisnew,goodsintroduce,goodsphoto) + va

36、lues( + txtgname.text.trim() + , + txtgprice.text.trim() + , + sessiongid.tostring() + ,是, + txtgintroduce.text.trim() + , + ddlphoto.selectedvalue + ); sqloperate.datacom(sqlstr); else string sqlstr = insert into tb_goodsinfo + (goodsname,goodsprice,goodstypeid,goodsisnew,goodsintroduce,goodsphoto)

37、 + values( + txtgname.text.trim() + , + txtgprice.text.trim() + , + sessiongid.tostring() + ,否, + txtgintroduce.text.trim() + , + ddlphoto.selectedvalue + ); sqloperate.datacom(sqlstr); protected void btnedit_click(object sender, eventargs e) goodsid(); if (cbisnew.checked = true) string sqlstr = up

38、date tb_goodsinfo set goodsname=+txtgname.text.trim() +,goodsprice=+txtgprice.text.trim()+,goodstypeid= +sessiongid.tostring()+,goodsisnew=是,goodsintroduce= + txtgintroduce.text.trim() + ,goodsphoto= + ddlphoto.selectedvalue + where goodsid= + requestgoodsid.tostring() + ; sqloperate.datacom(sqlstr)

39、; else string sqlstr = update tb_goodsinfo set goodsname= + txtgname.text.trim() + ,goodsprice= + txtgprice.text.trim() + ,goodstypeid= + sessiongid.tostring() + ,goodsisnew=否,goodsintroduce= + txtgintroduce.text.trim() + ,goodsphoto= + ddlphoto.selectedvalue + where goodsid= + requestgoodsid.tostri

40、ng() + ; sqloperate.datacom(sqlstr); protected void btnback_click(object sender, eventargs e) response.redirect(goodsmanage.aspx); protected void ddlphoto_selectedindexchanged(object sender, eventargs e) imgphoto.imageurl = ddlphoto.selectedvalue; public void goodsid() string sqlstrbind = select * f

41、rom tb_goodstype where goodstypename= + ddlgtype.selectedvalue + ; sqldataadapter myda = new sqldataadapter(sqlstrbind, sqlconn); dataset myds = new dataset(); myda.fill(myds, tb_goodstype); datarowview mydrv = myds.tablestb_goodstype.defaultview0; sessiongid = convert.tostring(mydrvgoodstypeid); 3. 會員管理：public partial class adminmanage_editmember : system.web.ui.page sqloperate sqloperate = new sqloperate(); sqlconnection sqlconn = new sqlconnection(configurationmanager.appsettingsconnectionstring); protected v