<%@ Page Language="C#" %>
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
File: Guestbook.cs
using System;
using System.Data;
using System.Data.SqlClient;
using System.Web.Configuration;
public class Guestbook
{
private string _conString;
public SqlDataReader GetEntries()
{
SqlConnection con = new SqlConnection(_conString);
SqlCommand cmd = new SqlCommand();
cmd.Connection = con;
cmd.CommandText = "SELECT Id,IPAddress,Comment,EntryDate FROM Guestbook";
con.Open();
return cmd.ExecuteReader(CommandBehavior.CloseConnection);
}
public void AddEntry(string IPAddress, string comment)
{
SqlConnection con = new SqlConnection(_conString);
SqlCommand cmd = new SqlCommand();
cmd.Connection = con;
cmd.CommandText = "INSERT Guestbook (IPAddress,Comment)" + " VALUES (@IPAddress, @Comment)";
cmd.Parameters.AddWithValue("@IPAddress", IPAddress);
cmd.Parameters.AddWithValue("@Comment", comment);
using (con)
{
con.Open();
cmd.ExecuteNonQuery();
}
}
public Guestbook()
{
_conString = WebConfigurationManager.ConnectionStrings["Guestbook"]. ConnectionString;
}
}
File: Web.config
connectionString="Data Source=.\SQLEXPRESS;
AttachDbFilename=|DataDirectory|MyDatabase.mdf;Integrated Security=True;User Instance=True" />