asp.net (stored procedure) uses three methods to Access database records (20070510)

Application of stored procedures in ASP.net ***************
Background code:
Using System;
Using System.Collections;
Using System.ComponentModel;
Using System.Data;
Using System.Drawing;
Using System.Web;
Using System.Web.SessionState;
Using System.Web.UI;
Using System.Web.UI.WebControls;
Using System.Web.UI.HtmlControls;
Using System.Data.SqlClient;

Namespace Softweb.employee
{
<summary>
Summary description of the Employee_add.
</summary>
public class Employee_add:System.Web.UI.Page
{
protected Wfnetctrl.calendar Calendar1;
protected System.Web.UI.WebControls.TextBox txtname;
protected System.Web.UI.WebControls.RadioButton RDOBTNNV;
protected System.Web.UI.WebControls.TextBox txtUserName;
protected System.Web.UI.WebControls.TextBox txtpwd;
protected System.Web.UI.WebControls.TextBox txtPwd2;
protected System.Web.UI.WebControls.Button btncancle;
protected System.Web.UI.WebControls.Button Btnadd;
protected System.Web.UI.WebControls.RadioButton Rdobtnnan;
protected System.Web.UI.WebControls.RadioButtonList rdobtnqx;
protected System.Web.UI.WebControls.RequiredFieldValidator reqvldt_name;
protected System.Web.UI.WebControls.RequiredFieldValidator Reqvldt_user;
protected System.Web.UI.WebControls.RequiredFieldValidator reqvldt_pwd;
protected System.Web.UI.WebControls.RequiredFieldValidator reqvldt_pwd2;
protected System.Data.SqlClient.SqlConnection myconn;
private void Page_Load (object sender, System.EventArgs e)
{
Place user code here to initialize page
Myconn=new SqlConnection (session["strconn"). ToString ());

}

Code generated #region the Web forms Designer
Override protected void OnInit (EventArgs e)
{
//
CodeGen: This call is required for the ASP.net Web forms Designer.
//
InitializeComponent ();
Base. OnInit (e);
}

<summary>
Designer supports required methods-do not use the Code editor to modify
The contents of this method.
</summary>
private void InitializeComponent ()
{
This.rdobtnNan.CheckedChanged + = new System.EventHandler (this.rdobtnnan_checkedchanged);
This.btnAdd.Click + = new System.EventHandler (This.btnadd_click);
This. Load + = new System.EventHandler (this. Page_Load);

}
#endregion

private void Rdobtnnan_checkedchanged (object sender, System.EventArgs e)
{

}

private void btnAdd_Click (object sender, System.EventArgs e)
{
1:*************** the general method of adding a database ******************
MyConn. Open ();
String Employee_name=this.txtname.text;
String sex= "male";
String UserName;
String Quanxian;
Try
//   {
SqlCommand cmd=new SqlCommand ();
if (this.rdobtnNan.Checked)
//    {
This.rdobtnnv.checked=false;
sex= "Male";
//    }
else if (this.rdobtnNv.Checked)
//    {
This.rdobtnnan.checked=false;
sex= "female";
//    }
Username=this.txtusername.text.tostring ();
Quanxian=this.rdobtnqx.selectedvalue.tostring ();
Cmd. Connection=myconn;
cmd.commandtext= "INSERT into employee (Employee_name,sex,user_name,quanxian) VALUES (' +employee_name+" ', ' "+sex+" ', ' "+ Username+ "', '" "+quanxian+" ";
Cmd. ExecuteNonQuery ();
MyConn. Close ();
//   }
catch (Exception err)
//   {
This. RegisterStartupScript ("Add", "<script>alert" ("+err"). Message.tostring () + "');</script>");
//   }
This. RegisterStartupScript ("Add", "<script>alert (' employee adds success ');</script>");

2:*************** ways to add data using stored procedures **************

Try
//   {
MyConn. Open ();
String Employee_name=this.txtname.text;
String sex= "male";
if (this.rdobtnNan.Checked)
//    {
This.rdobtnnv.checked=false;
sex= "Male";
//    }
else if (this.rdobtnNv.Checked)
//    {
This.rdobtnnan.checked=false;
sex= "female";
//    }
SqlCommand cmd=new SqlCommand ();
Cmd.commandtype=commandtype.storedprocedure;
cmd.commandtext= "Employee_add";
Cmd. Connection=myconn;
SqlParameter employeename=new SqlParameter ("@employee_name", SqlDbType.Char);
SqlParameter empsex=new SqlParameter ("@sex", SqlDbType.Char);
SqlParameter empusername=new SqlParameter ("@userName", SqlDbType.VarChar);
SqlParameter empquanxian=new SqlParameter ("@quanxian", SqlDbType.VarChar);
//
Employeename.value=employee_name. ToString ();
Empsex.value=sex;
Empusername. Value=this.txtusername.text.tostring ();
Empquanxian. Value=this.rdobtnqx.selectedvalue.tostring ();
//
Cmd. Parameters.Add (EmployeeName);
Cmd. Parameters.Add (Empsex);
Cmd. Parameters.Add (Empusername);
Cmd. Parameters.Add (Empquanxian);
Cmd. ExecuteNonQuery ();
MyConn. Close ();
//   }
catch (Exception err)
//   {
This. RegisterStartupScript ("Add", "<script>alert" ("+err"). Message.tostring () + "');</script>");
//   }
This. RegisterStartupScript ("Add", "<script>alert (' employee adds success ');</script>");

3:***************** methods to add data using Parameters ******************

Try
{
MyConn. Open ();
String Employee_name=this.txtname.text;
String sex= "male";

SqlCommand cmd=new SqlCommand ();
Cmd. Connection=myconn;
cmd.commandtext= "INSERT into employee (Employee_name,sex,user_name,quanxian) VALUES (@employee_name, @sex, @userName, @ Quanxian) ";
SqlParameter employeename=new SqlParameter ("@employee_name", SqlDbType.Char);
SqlParameter empsex=new SqlParameter ("@sex", SqlDbType.Char);
SqlParameter empusername=new SqlParameter ("@userName", SqlDbType.VarChar);
SqlParameter empquanxian=new SqlParameter ("@quanxian", SqlDbType.VarChar);

Employeename.value=employee_name. ToString ();
Empsex.value=sex;
Empusername. Value=this.txtusername.text.tostring ();
Empquanxian. Value=this.rdobtnqx.selectedvalue.tostring ();

Cmd. Parameters.Add (EmployeeName);
Cmd. Parameters.Add (Empsex);
Cmd. Parameters.Add (Empusername);
Cmd. Parameters.Add (Empquanxian);
Cmd. ExecuteNonQuery ();
MyConn. Close ();
}

catch (Exception err)
{
This. RegisterStartupScript ("Add", "<script>alert" ("+err"). Message.tostring () + "');</script>");
}
This. RegisterStartupScript ("Add", "<script>alert (' employee adds success ');</script>");

}
}
}
Stored procedures for the database:
Stored Procedure name: Employee_add
CREATE PROCEDURE Employee_add
(@employee_name char (), @sex char (2), @userName varchar (), @quanxian varchar (50))
As
INSERT into employee (Employee_name,sex,user_name,quanxian) VALUES (@employee_name, @sex, @userName, @quanxian)
Go