using System;
using System.Collections.Generic;
using System.Linq;
using System.Web;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.Data;
using System.Data.Sql;
using System.Data.SqlClient;
using System.Text.RegularExpressions;
using System.Configuration;

namespace CRMPortal
{
    public partial class AdminEditUser : System.Web.UI.Page
    {
        private SqlConnection sql = null;
        private ConnectionStringSettings sqlString = ConfigurationManager.ConnectionStrings["actionsql1"];

        public int uid;
        public bool uidExists;

        protected void Page_Load(object sender, EventArgs e)
        {
            //if (!siteAdmin.Equals(Page.User.Identity.Name.ToUpper()))
            if (!Logic.isAdmin(Page.User.Identity.Name))
            {
                Response.Write("You are not authorized to access this page.");
                Response.Redirect("~/NotAllowed.html");
                return;
            }

            if (Request.QueryString.Count > 0 && !int.TryParse(Request.QueryString["U"], out uid)) uid = 0;

            if (!Page.IsPostBack)
            {
                if (Request.QueryString.Count > 0)
                {
                    System.Collections.Specialized.NameValueCollection qs = Request.QueryString;
                    if (qs["U"] != null)
                    {
                        sqlConnect();
                        string query = "USE CRM; SELECT TOP 1 * FROM dbo.Users WHERE UserID=@UID";
                        SqlCommand cmd = new SqlCommand(query, sql);
                        cmd.Parameters.Add(new SqlParameter("@UID", uid));
                        SqlDataReader reader = cmd.ExecuteReader();
                        DataTable d = new DataTable();
                        d.Load(reader);
                        reader.Close();
                        cmd.Dispose();
                        reader.Dispose();
                        sqlDisconnect();
                        if (d.Rows.Count < 1)
                        {
                            uidExists = false;
                            return;
                        }
                        DataRow r = d.Rows[0];
                        tbRealName.Text = r["Name"].ToString();
                        tbUsername.Text = r["ADNAME"].ToString();
                        tbASASLM.Text = r["ASASLM"].ToString();
                        tbASASTR.Text = r["ASASTR"].ToString();
                        lblUserID.Text = r["UserID"].ToString();
                    }
                }
            }
        }

        public void sqlConnect()
        {

            sql = new SqlConnection(sqlString.ConnectionString);
            sql.Open();
        }

        public void sqlDisconnect()
        {
            sql.Close();
        }

        protected void updateRecord()
        {

        }

        protected void btnSave_Click(object sender, EventArgs e)
        {
            string query = "";
            if (!Logic.uidExists(uid))
                query = "INSERT INTO dbo.Users (Name, ASASLM, ASASTR, ADNAME) VALUES (@NAME, @ASASLM, @ASASTR, @ADNAME)";
            else
                query = "UPDATE dbo.Users SET Name=@NAME, ASASLM=@ASASLM, ASASTR=@ASASTR, ADNAME=@ADNAME WHERE UserID=@UID";

            sqlConnect();
            SqlCommand cmd = new SqlCommand(query, sql);
            cmd.Parameters.Add(new SqlParameter("@NAME", tbRealName.Text));
            cmd.Parameters.Add(new SqlParameter("@ASASLM", tbASASLM.Text));
            cmd.Parameters.Add(new SqlParameter("@ASASTR", tbASASTR.Text));
            cmd.Parameters.Add(new SqlParameter("@ADNAME", tbUsername.Text));
            cmd.Parameters.Add(new SqlParameter("@UID", lblUserID.Text));
            cmd.ExecuteNonQuery();
            /*
            DataTable d = new DataTable();
            d.Load(reader);
            cmd.Dispose();
            reader.Dispose();*/
            sqlDisconnect();
            Response.Redirect("~/Admin.aspx");
        }

        protected void btnCancel_Click(object sender, EventArgs e)
        {
            Response.Redirect("~/Admin.aspx");
        }
    }
}