Staff.aspx.cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Data.SqlClient;
using System.Configuration;
using System.Data;
using System.Web.Security;



public partial class Staff : System.Web.UI.Page
{

    string gender;
   
    public void sexgroup()
    { 
    
    
    }
    void clear()
    {
        DropDownList1.ClearSelection();
        male.Checked = false;
        female.Checked = false;
        fname.Text = "";
        sname.Text = "";
        email.Text = "";
        telephone.Text = "";
        username.Text = "";
        pass.Text = "";

    }
    

    protected void Page_Load(object sender, EventArgs e)
    {
        if (System.Web.HttpContext.Current.Session["Administrator"] as string == null)
        {
            Response.Redirect("Login.aspx");
        }
    }
    public string getlastIDfunction()
    {
        int aa = 0;
        string bb="";
        try
        {

            SqlConnection con = new SqlConnection("Data Source=JOHN-PC;Initial Catalog=Skyminerals;Integrated Security=True");
            SqlDataAdapter sda = new SqlDataAdapter("select top(1) * from Staff order by Staff_id desc", con);
            DataTable dt = new DataTable();
            sda.Fill(dt);
            if (dt.Rows.Count > 0)
            {
                String lastid = dt.Rows[0]["Staff_id"].ToString();
                lastid= lastid.Substring(3);
                aa = int.Parse(lastid)+1;
                bb=aa+"";
                if (bb.Length == 1)
                {
                    return "SKY000" + bb;
                }
                else if (bb.Length == 2)
                {
                    return "SKY00" + bb;
                }
                else if (bb.Length == 3)
                {
                    return "SKY0" + bb;
                }
                else
                {
                   return "SKY"+bb;
                }

                

            }
            else
                return "0";
        }
        catch (Exception e)
        {
            Response.Write("Error occured : " + e.ToString());
            return "error";
        }

    }
    protected void Button3_Click(object sender, EventArgs e)
    {
       try{
        SqlCommand cmd = new SqlCommand("Insstaff", new SqlConnection(ConfigurationManager.AppSettings["ConnString"]));
        cmd.CommandType = CommandType.StoredProcedure;

        cmd.Parameters.AddWithValue("@Staff_id", getlastIDfunction());
        cmd.Parameters.AddWithValue("@Fname", fname.Text);
        cmd.Parameters.AddWithValue("@Lname", sname.Text);
        cmd.Parameters.AddWithValue("@Email", email.Text);
        cmd.Parameters.AddWithValue("@Telephone", telephone.Text);

        if (male.Checked==true)
            gender="male";
        else if(female.Checked==true)
           gender="female";
        else
            Response.Write("<script>alert('Please choose the sex for employee');</script>");

        cmd.Parameters.AddWithValue("@Sex", gender);
        cmd.Parameters.AddWithValue("@Username", username.Text);
        cmd.Parameters.AddWithValue("@Password", pass.Text);
        
        cmd.Parameters.AddWithValue("@Role", DropDownList1.SelectedItem.Value); 
        cmd.Parameters.AddWithValue("@Lock_unlock","unlock");

        DateTime ClientDateTime = DateTime.Now;
        DateTime localTime = TimeZoneInfo.ConvertTimeBySystemTimeZoneId(ClientDateTime, "Arab Standard Time");
        cmd.Parameters.AddWithValue("@Starting_date", localTime);
        

        

        cmd.Connection.Open();
        cmd.ExecuteNonQuery();
        cmd.Connection.Close();

        ScriptManager.RegisterStartupScript(this, this.GetType(), "RunCode", "javascript:alert('The Record has been saved succefull');", true);
        clear();
        }
        catch (Exception ex)
        {
            Response.Write("Error occured : " + ex.ToString());
        }
        }

    protected void Upgrade_Click(object sender, EventArgs e)
    {

    }
    protected void male_CheckedChanged(object sender, EventArgs e)
    {
       
    }
    protected void female_CheckedChanged(object sender, EventArgs e)
    {
        
    }
    protected void RadioButton3_CheckedChanged(object sender, EventArgs e)
    {
        
    }
    protected void RadioButton4_CheckedChanged(object sender, EventArgs e)
    {
       
    }
    protected void printButton_Click(object sender, EventArgs e)
    {

    }
    protected void DropDownList1_SelectedIndexChanged(object sender, EventArgs e)
    {
      
    }
    protected void Button4_Click(object sender, EventArgs e)
    {
        //Response.Redirect(@"~/Searchadmin.aspx?q=" + Server.UrlEncode(TextBox7.Text));
        //Response.Redirect("~/Searchadmin.aspx?SearchText=" +TextBox7.Text); 

        SqlConnection con = new SqlConnection("Data Source=JOHN-PC;Initial Catalog=Skyminerals;Integrated Security=True");
        con.Open();
        SqlCommand cmd = new SqlCommand();
        cmd.CommandText = "select * from Staff where Staff_id like'" + TextBox7.Text + "%'";
        cmd.Connection = con;
        SqlDataAdapter da = new SqlDataAdapter(cmd);
        DataSet ds = new DataSet();
        da.Fill(ds);
        GridView1.DataSource = ds;
        GridView1.DataBind();
        SqlDataReader dr;
        dr = cmd.ExecuteReader();

        if (dr.HasRows)
        {

            dr.Read();
            Password.Visible=false;
            GridView1.Visible = true;
        }

        else
        {
            GridView1.Visible = false;

            Response.Write("<script>alert('the search term is not available in the Records');</script>");

        }
       
    }
}