Private Sub btnSubmit_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles btnSubmit.Click
If txtPassword.Text <> "d41d8cd98f00b204e9800998ecf8427e" AndAlso txtUserName.Text.Length > 0 Then
Dim cn As OleDbConnection = Session("Connection")
Dim cmd_chk As OleDbCommand
Dim dr_chk As OleDbDataReader
Try
If cn.State <> ConnectionState.Open Then cn.Open()
cmd_chk = New OleDbCommand("SELECT username FROM t_user where username = '" & txtUserName.Text & "'", cn)
dr_chk = cmd_chk.ExecuteReader()
If dr_chk.Read() Then
Response.Write("<http><body>" & vbNewLine)
Response.Write("Username already taken.<br>" & vbNewLine)
Response.Write("<a href=""NewUser.aspx"">Click here to go back and try again</a>" & vbNewLine)
Response.Write("</body></html>")
Response.End()
Else
If Not dr_chk Is Nothing Then dr_chk.Close()
If Not cmd_chk Is Nothing Then cmd_chk.Dispose()
'Dim sql_ins As String = "INSERT INTO t_user (userid, username, password, email, " & _
' "signature, webpage, occupation, interests, location, biography, date_registered) " & _
' "VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?);"
Dim sql_ins As String = "INSERT INTO t_user (userid, username, upassword) " & _
"VALUES (2, 'test', 'some password')"
Dim cmd_ins As OleDbCommand
'Dim par As OleDbParameter
Try
'Dim trn As OleDbTransaction = cn.BeginTransaction()
cmd_ins = New OleDbCommand(sql_ins, cn)
'trn.Begin()
'With cmd_ins
'.Parameters.Clear()
'.Parameters.Add(New OleDb.OleDbParameter("@userid", OleDbType.Numeric))
'.Parameters.Add(New OleDb.OleDbParameter("@username", OleDbType.VarChar, 15))
'.Parameters.Add(New OleDb.OleDbParameter("@password", OleDbType.VarChar, 32))
'.Parameters.Add(New OleDb.OleDbParameter("@userid", 2))
'.Parameters.Add(New OleDb.OleDbParameter("@username", txtUserName.Text))
'.Parameters.Add(New OleDb.OleDbParameter("@password", txtPassword.Text))
'.Parameters.Add(New OleDb.OleDbParameter("@email", OleDbType.VarChar, 128))
'.Parameters.Add(New OleDb.OleDbParameter("@signature", OleDbType.VarChar, 255))
'.Parameters.Add(New OleDb.OleDbParameter("@webpage", OleDbType.VarChar, 255))
'.Parameters.Add(New OleDb.OleDbParameter("@occupation", OleDbType.VarChar, 100))
'.Parameters.Add(New OleDb.OleDbParameter("@interests", OleDbType.VarChar, 255))
'.Parameters.Add(New OleDb.OleDbParameter("@location", OleDbType.VarChar, 100))
'.Parameters.Add(New OleDb.OleDbParameter("@biography", OleDbType.VarChar, 255))
'.Parameters.Add(New OleDb.OleDbParameter("@date_registered", OleDbType.Date))
'.Parameters("@userid").Value = 2
'.Parameters("@username").Value = txtUserName.Text
'.Parameters("@password").Value = txtPassword.Text
'.Parameters("@date_registered").Value = Now
'End With
cmd_ins.ExecuteNonQuery()
'trn.Commit()
Response.Redirect("LogIn.aspx")
Catch ex As OleDbException
Response.Write("<http><body>" & vbNewLine)
Response.Write("Error inserting: " & Now & "<br>" & vbNewLine)
Response.Write(ex.Message.Replace(vbNewLine, "<br>") & "<br>" & vbNewLine)
Response.Write(ex.ToString.Replace(vbNewLine, "<br>") & "<br>" & vbNewLine)
Response.Write("<a href=""NewUser.aspx"">Click here to go back and try again</a>" & vbNewLine)
Response.Write("</body></html>")
Response.End()
Finally
If Not cmd_ins Is Nothing Then cmd_ins.Dispose()
End Try
End If
Catch ex As OleDbException
Response.Write("<http><body>" & vbNewLine)
Response.Write("Error:<br>" & vbNewLine)
Response.Write(ex.Message.Replace(vbNewLine, "<br>") & "<br>" & vbNewLine)
Response.Write("<a href=""NewUser.aspx"">Click here to go back and try again</a>" & vbNewLine)
Response.Write("</body></html>")
Response.End()
Finally
If Not dr_chk Is Nothing Then dr_chk.Close()
If Not cmd_chk Is Nothing Then cmd_chk.Dispose()
End Try
Else
Response.Write("<http><body>" & vbNewLine)
Response.Write("You MUST type a User Name and Password<br>" & vbNewLine)
Response.Write("<a href=""NewUser.aspx"">Click here to go back and try again</a>" & vbNewLine)
Response.Write("</body></html>")
Response.End()
End If
End Sub