<%@ Page AutoEventWireup="true" Language="C#" MasterPageFile="~/MasterPage.master" Title="Products" Inherits="PetShop.Web.Products" CodeFile="~/Products.aspx.cs" %>

[AspNetHostingPermission(SecurityAction.InheritanceDemand, 
Level=AspNetHostingPermissionLevel.Minimal), 
AspNetHostingPermission(SecurityAction.LinkDemand, 
Level=AspNetHostingPermissionLevel.Minimal)]
public interface IHttpHandler
{
  void ProcessRequest(HttpContext context);
  bool IsReusable { get; }
}

public partial class Products : System.Web.UI.Page 
{
 protected void Page_Load(object sender, EventArgs e) 
 {
  //get page header and title
  Page.Title = WebUtility.GetCategoryName(Request.QueryString["categoryId"]);
 }
}

public partial class CheckOut : System.Web.UI.Page

protected void wzdCheckOut_FinishButtonClick(object sender, WizardNavigationEventArgs e) {
 if (Profile.ShoppingCart.CartItems.Count > 0) {
  if (Profile.ShoppingCart.Count > 0) {

   // display ordered items
   CartListOrdered.Bind(Profile.ShoppingCart.CartItems);

   // display total and credit card information
   ltlTotalComplete.Text = ltlTotal.Text;
   ltlCreditCardComplete.Text = ltlCreditCard.Text;

   // create order
   OrderInfo order = new OrderInfo(int.MinValue, DateTime.Now, User.Identity.Name, GetCreditCardInfo(), billingForm.Address, shippingForm.Address, Profile.ShoppingCart.Total, Profile.ShoppingCart.GetOrderLineItems(), null);

   // insert
   Order newOrder = new Order();
   newOrder.Insert(order);

   // destroy cart
   Profile.ShoppingCart.Clear();
   Profile.Save();
  }
 }
 else {
  lblMsg.Text = "<p><br>Can not process the order. Your cart is empty.</p><p class=SignUpLabel><a class=linkNewUser href=Default.aspx>Continue shopping</a></p>";
  wzdCheckOut.Visible = false;
 }
}

public class CustomGrid : Repeater…
//Static constants
 protected const string HTML1 = "<table cellpadding=0 
cellspacing=0><tr><td colspan=2>";
 protected const string HTML2 = "</td></tr><tr><td class=paging align=left>";
 protected const string HTML3 = "</td><td align=right class=paging>";
 protected const string HTML4 = "</td></tr></table>";
 private static readonly Regex RX = new Regex(@"^&page=\d+", 
RegexOptions.Compiled);
 private const string LINK_PREV = "<a href=?page={0}>&#060;&nbsp;Previous</a>";
 private const string LINK_MORE = "<a href=?page={0}>More&nbsp;&#062;</a>";
private const string KEY_PAGE = "page";
 private const string COMMA = "?";
 private const string AMP = "&";

override protected void Render(HtmlTextWriter writer) {

  //Check there is some data attached
  if (ItemCount == 0) {
   writer.Write(emptyText);
   return;
  }
  //Mask the query
  string query = Context.Request.Url.Query.Replace(COMMA, AMP);
  query = RX.Replace(query, string.Empty);
  // Write out the first part of the control, the table header
  writer.Write(HTML1);
  // Call the inherited method
  base.Render(writer);
  // Write out a table row closure
  writer.Write(HTML2);
  //Determin whether next and previous buttons are required
  //Previous button?
  if (currentPageIndex > 0)
   writer.Write(string.Format(LINK_PREV, (currentPageIndex - 1) + query));
  //Close the table data tag
  writer.Write(HTML3);

  //Next button?
  if (currentPageIndex < PageCount)
   writer.Write(string.Format(LINK_MORE, (currentPageIndex + 1) + query));

  //Close the table
  writer.Write(HTML4);
 }

public virtual object DataSource
{
  get {… }
  set
  {
   if (((value != null) && !(value is IListSource)) && !(value is IEnumerable))
   {
     throw new ArgumentException(SR.GetString("Invalid_DataSource_Type", new object[] { this.ID }));
   }
   this.dataSource = value;
   this.OnDataPropertyChanged();
  }
}

private IList dataSource;
private int itemCount;

override public object DataSource {
 set {
 //This try catch block is to avoid issues with the VS.NET designer
  //The designer will try and bind a datasource which does not derive from ILIST
  try {
   dataSource = (IList)value;
   ItemCount = dataSource.Count;
  }
  catch {
   dataSource = null;
   ItemCount = 0;
  }
 }
}

override protected void OnDataBinding(EventArgs e) {

 //Work out which items we want to render to the page
 int start = CurrentPageIndex * pageSize;
 int size = Math.Min(pageSize, ItemCount - start);

 IList page = new ArrayList();
 //Add the relevant items from the datasource
 for (int i = 0; i < size; i++)
  page.Add(dataSource[start + i]);

 //set the base objects datasource
 base.DataSource = page;
 base.OnDataBinding(e);
}

public partial class ShoppingCartControl : System.Web.UI.UserControl
  
 protected void Page_PreRender(object sender, EventArgs e) {
  if (!IsPostBack) {
   BindCart();    
  }
 }
 private void BindCart() {

  ICollection<CartItemInfo> cart = Profile.ShoppingCart.CartItems;
  if (cart.Count > 0) {
   repShoppingCart.DataSource = cart;
   repShoppingCart.DataBind();
   PrintTotal();
   plhTotal.Visible = true;
  }
  else {
   repShoppingCart.Visible = false;
   plhTotal.Visible = false;
   lblMsg.Text = "Your cart is empty.";
  }
 }

<PetShopControl:shoppingcartcontrol id="ShoppingCartControl1" runat="server"></PetShopControl:shoppingcartcontrol>

public interface IPetShopProfileProvider 
{ 
 AddressInfo GetAccountInfo(string userName, string appName); 
 void SetAccountInfo(int uniqueID, AddressInfo addressInfo);
 IList<CartItemInfo> GetCartItems(string userName, string appName, 
bool isShoppingCart);
 void SetCartItems(int uniqueID, ICollection<CartItemInfo> cartItems, 
bool isShoppingCart);
 void UpdateActivityDates(string userName, bool activityOnly, string appName);
 int GetUniqueID(string userName, bool isAuthenticated, bool ignoreAuthenticationType,
 string appName);
 int CreateProfileForUser(string userName, bool isAuthenticated, string appName);
 IList<string> GetInactiveProfiles(int authenticationOption, 
DateTime userInactiveSinceDate, string appName);
 bool DeleteProfile(string userName, string appName); 
 IList<CustomProfileInfo> GetProfileInfo(int authenticationOption, 
string usernameToMatch, DateTime userInactiveSinceDate, string appName, 
out int totalRecords);
}

public sealed class DataAccess {

 private static readonly string profilePath = ConfigurationManager.AppSettings["ProfileDAL"];
 public static PetShop.IProfileDAL.IPetShopProfileProvider CreatePetShopProfileProvider() {
 string className = profilePath + ".PetShopProfileProvider";
 return (PetShop.IProfileDAL.IPetShopProfileProvider)Assembly.Load(profilePath).CreateInstance(className);
 }
}

private static readonly IPetShopProfileProvider dal = DataAccess.CreatePetShopProfileProvider();

<profile automaticSaveEnabled="false" defaultProvider="ShoppingCartProvider">
 <providers>
 <add name="ShoppingCartProvider" connectionStringName="SQLProfileConnString" type="PetShop.Profile.PetShopProfileProvider" applicationName=".NET Pet Shop 4.0"/>
 <add name="WishListProvider" connectionStringName="SQLProfileConnString" type="PetShop.Profile.PetShopProfileProvider" applicationName=".NET Pet Shop 4.0"/>
 <add name="AccountInfoProvider" connectionStringName="SQLProfileConnString" type="PetShop.Profile.PetShopProfileProvider" applicationName=".NET Pet Shop 4.0"/>
 </providers>
 <properties>
 <add name="ShoppingCart" type="PetShop.BLL.Cart" allowAnonymous="true" provider="ShoppingCartProvider"/>
 <add name="WishList" type="PetShop.BLL.Cart" allowAnonymous="true" provider="WishListProvider"/>
 <add name="AccountInfo" type="PetShop.Model.AddressInfo" allowAnonymous="false" provider="AccountInfoProvider"/>
 </properties>
</profile>

<add key="ProfileDAL" value="PetShop.SQLProfileDAL"/>

public partial class ShoppingCart : System.Web.UI.Page {

 protected void Page_PreInit(object sender, EventArgs e) {
  if (!IsPostBack) {
   string itemId = Request.QueryString["addItem"];
   if (!string.IsNullOrEmpty(itemId)) {
    Profile.ShoppingCart.Add(itemId);
    Profile.Save();
    // Redirect to prevent duplictations in the cart if user hits "Refresh"
    Response.Redirect("~/ShoppingCart.aspx", true);
   }
  }
 }
}

public override MembershipUser CreateUser(string username, string password, string email, string passwordQuestion, string passwordAnswer, bool isApproved, object providerUserKey, out MembershipCreateStatus status)
{
  MembershipUser user1;
  //前面的代碼略;
  try
  {
   SqlConnectionHolder holder1 = null;
   try
   {
     holder1 = SqlConnectionHelper.GetConnection(this._sqlConnectionString, true);
     this.CheckSchemaVersion(holder1.Connection);
     DateTime time1 = this.RoundToSeconds(DateTime.UtcNow);
     SqlCommand command1 = new SqlCommand("dbo.aspnet_Membership_CreateUser", holder1.Connection);
     command1.CommandTimeout = this.CommandTimeout;
     command1.CommandType = CommandType.StoredProcedure;
     command1.Parameters.Add(this.CreateInputParam("@ApplicationName", SqlDbType.NVarChar, this.ApplicationName));
     command1.Parameters.Add(this.CreateInputParam("@UserName", SqlDbType.NVarChar, username));
     command1.Parameters.Add(this.CreateInputParam("@Password", SqlDbType.NVarChar, text2));
     command1.Parameters.Add(this.CreateInputParam("@PasswordSalt", SqlDbType.NVarChar, text1));
     command1.Parameters.Add(this.CreateInputParam("@Email", SqlDbType.NVarChar, email));
     command1.Parameters.Add(this.CreateInputParam("@PasswordQuestion", SqlDbType.NVarChar, passwordQuestion));
     command1.Parameters.Add(this.CreateInputParam("@PasswordAnswer", SqlDbType.NVarChar, text3));
     command1.Parameters.Add(this.CreateInputParam("@IsApproved", SqlDbType.Bit, isApproved));
     command1.Parameters.Add(this.CreateInputParam("@UniqueEmail", SqlDbType.Int, this.RequiresUniqueEmail ? 1 : 0));
     command1.Parameters.Add(this.CreateInputParam("@PasswordFormat", SqlDbType.Int, (int) this.PasswordFormat));
     command1.Parameters.Add(this.CreateInputParam("@CurrentTimeUtc", SqlDbType.DateTime, time1));
     SqlParameter parameter1 = this.CreateInputParam("@UserId", SqlDbType.UniqueIdentifier, providerUserKey);
     parameter1.Direction = ParameterDirection.InputOutput;
     command1.Parameters.Add(parameter1);
     parameter1 = new SqlParameter("@ReturnValue", SqlDbType.Int);
     parameter1.Direction = ParameterDirection.ReturnValue;
     command1.Parameters.Add(parameter1);
     command1.ExecuteNonQuery();
     int num3 = (parameter1.Value != null) ? ((int) parameter1.Value) : -1;
     if ((num3 < 0) || (num3 > 11))
     {
      num3 = 11;
     }
     status = (MembershipCreateStatus) num3;
     if (num3 != 0)
     {
      return null;
     }
     providerUserKey = new Guid(command1.Parameters["@UserId"].Value.ToString());
     time1 = time1.ToLocalTime();
     user1 = new MembershipUser(this.Name, username, providerUserKey, email, passwordQuestion, null, isApproved, false, time1, time1, time1, time1, new DateTime(0x6da, 1, 1));
   }
   finally
   {
     if (holder1 != null)
     {
      holder1.Close();
      holder1 = null;
     }
   }
  }
  catch
  {
   throw;
  }
  return user1;
}

public override MembershipUser CreateUser(string username, string password, string email, string passwordQuestion, string passwordAnswer, bool isApproved, object userId, out MembershipCreateStatus status) {
 //前面的代碼略;
 //Create connection
 OracleConnection connection = new OracleConnection(OracleHelper.ConnectionStringMembership);
 connection.Open();
 OracleTransaction transaction = connection.BeginTransaction(IsolationLevel.ReadCommitted);
 try {
 DateTime dt = DateTime.Now;
 bool isUserNew = true;

 // Step 1: Check if the user exists in the Users table: create if not 
 int uid = GetUserID(transaction, applicationId, username, true, false, dt, out isUserNew);
 if(uid == 0) { // User not created successfully!
 status = MembershipCreateStatus.ProviderError;
 return null;
 }
 // Step 2: Check if the user exists in the Membership table: Error if yes.
 if(IsUserInMembership(transaction, uid)) {
 status = MembershipCreateStatus.DuplicateUserName;
 return null;
 }
 // Step 3: Check if Email is duplicate
 if(IsEmailInMembership(transaction, email, applicationId)) {
 status = MembershipCreateStatus.DuplicateEmail;
 return null;
 }
 // Step 4: Create user in Membership table  
 int pFormat = (int)passwordFormat;
 if(!InsertUser(transaction, uid, email, pass, pFormat, salt, "", "", isApproved, dt)) {
 status = MembershipCreateStatus.ProviderError;
 return null;
 }
 // Step 5: Update activity date if user is not new
 if(!isUserNew) {
 if(!UpdateLastActivityDate(transaction, uid, dt)) {
 status = MembershipCreateStatus.ProviderError;
 return null;
 }
 }
 status = MembershipCreateStatus.Success;
 return new MembershipUser(this.Name, username, uid, email, passwordQuestion, null, isApproved, false, dt, dt, dt, dt, DateTime.MinValue);
 }
 catch(Exception) {
 if(status == MembershipCreateStatus.Success)
 status = MembershipCreateStatus.ProviderError;
 throw;
 }
 finally {
 if(status == MembershipCreateStatus.Success)
 transaction.Commit();
 else
 transaction.Rollback();
 connection.Close();
 connection.Dispose();
 }
}

private static bool InsertUser(OracleTransaction transaction, int userId, string email, string password, int passFormat, string passSalt, string passQuestion, string passAnswer, bool isApproved, DateTime dt) {

 string insert = "INSERT INTO MEMBERSHIP (USERID, EMAIL, PASSWORD, PASSWORDFORMAT, PASSWORDSALT, PASSWORDQUESTION, PASSWORDANSWER, ISAPPROVED, CREATEDDATE, LASTLOGINDATE, LASTPASSWORDCHANGEDDATE) VALUES (:UserID, :Email, :Pass, :PasswordFormat, :PasswordSalt, :PasswordQuestion, :PasswordAnswer, :IsApproved, :CDate, :LLDate, :LPCDate)";
 OracleParameter[] insertParms = { new OracleParameter(":UserID", OracleType.Number, 10), new OracleParameter(":Email", OracleType.VarChar, 128), new OracleParameter(":Pass", OracleType.VarChar, 128), new OracleParameter(":PasswordFormat", OracleType.Number, 10), new OracleParameter(":PasswordSalt", OracleType.VarChar, 128), new OracleParameter(":PasswordQuestion", OracleType.VarChar, 256), new OracleParameter(":PasswordAnswer", OracleType.VarChar, 128), new OracleParameter(":IsApproved", OracleType.VarChar, 1), new OracleParameter(":CDate", OracleType.DateTime), new OracleParameter(":LLDate", OracleType.DateTime), new OracleParameter(":LPCDate", OracleType.DateTime) };
 insertParms[0].Value = userId;
 insertParms[1].Value = email;
 insertParms[2].Value = password;
 insertParms[3].Value = passFormat;
 insertParms[4].Value = passSalt;
 insertParms[5].Value = passQuestion;
 insertParms[6].Value = passAnswer;
 insertParms[7].Value = OracleHelper.OraBit(isApproved);
 insertParms[8].Value = dt;
 insertParms[9].Value = dt;
 insertParms[10].Value = dt;

 if(OracleHelper.ExecuteNonQuery(transaction, CommandType.Text, insert, insertParms) != 1)
 return false;
 else
 return true;
}

<membership defaultProvider="SQLMembershipProvider">
 <providers>
 <add name="SQLMembershipProvider" type="System.Web.Security.SqlMembershipProvider" connectionStringName="SQLMembershipConnString" applicationName=".NET Pet Shop 4.0" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="false" requiresUniqueEmail="false" passwordFormat="Hashed"/>
 </providers>
</membership>

<membership defaultProvider="OracleMembershipProvider">
 <providers>
 <clear/>
 <add name="OracleMembershipProvider" 
 type="PetShop.Membership.OracleMembershipProvider" 
 connectionStringName="OraMembershipConnString" 
 enablePasswordRetrieval="false" 
 enablePasswordReset="false" 
 requiresUniqueEmail="false" 
 requiresQuestionAndAnswer="false" 
 minRequiredPasswordLength="7" 
 minRequiredNonalphanumericCharacters="1" 
 applicationName=".NET Pet Shop 4.0" 
 hashAlgorithmType="SHA1" 
 passwordFormat="Hashed"/>
 </providers>
</membership>

<asp:Login ID="Login" runat="server" CreateUserUrl="~/NewUser.aspx" SkinID="Login" FailureText="Login failed. Please try again.">
</asp:Login>

<asp:CreateUserWizard ID="CreateUserWizard" runat="server" CreateUserButtonText="Sign Up" InvalidPasswordErrorMessage="Please enter a more secure password." PasswordRegularExpressionErrorMessage="Please enter a more secure password." 
RequireEmail="False" SkinID="NewUser">
<WizardSteps>
   <asp:CreateUserWizardStep ID="CreateUserWizardStep1" runat="server">
 </asp:CreateUserWizardStp>
 </WizardSteps>
</asp:CreateUserWizard>

<%@ Master Language="C#" AutoEventWireup="true" CodeFile="MasterPage.master.cs" Inherits="PetShop.Web.MasterPage" %>

public partial class MasterPage : System.Web.UI.MasterPage {

 private const string HEADER_PREFIX = ".NET Pet Shop :: {0}";

 protected void Page_PreRender(object sender, EventArgs e) { 
  ltlHeader.Text = Page.Header.Title;
  Page.Header.Title = string.Format(HEADER_PREFIX, Page.Header.Title);   
 }
 protected void btnSearch_Click(object sender, EventArgs e) {
  WebUtility.SearchRedirect(txtSearch.Text); 
 }
}

<%@ Page Language="C#" MasterPageFile="~/MasterPage.master" AutoEventWireup="true" CodeFile="CheckOut.aspx.cs" Inherits="PetShop.Web.CheckOut" Title="Check Out" %>

<%@ Master Language="C#" master="Parent.master"%>

void Page_PreInit(Object sender, EventArgs e)
{
 this.MasterPageFile = "~/NewMaster.master";
}