E-Commerce Application Implementation Planning and Details

Chapter 6

IMPLEMENTATION PLANNING AND DETAILS

Computer Department 54
E-Commerce Application Implementation Planning and Details

6.1 IMPLEMENTATION ENVIRONMENT

As E-Commerce application is an online web-store it can be accessed by any

number of users at a time. Different customers from different places can purchase the
same products from the mall simultaneously. They can place order, view orders,
update orders at the same time. There is no constraint for the number of user
accessing the application. But updating on the admin side is allowed only one user at
a time and only the administrator has the right to do it. It has fantastic user interface
design and its so user friendly that any unknown user can easily use it without any
complexity.

6.2 MODULES SPECIFICATION

The entire E-commerce application is divided into seven modules as follows:

 Customer Tools
 Easy Navigation and Silent Features
 Administrative Control Center
 Product Management
 Shipping and Packing
 Payment Gateway
 Reports

The modules which are currently covered are:

 Customer Tools

This module deals with all the customer side controls. The customer
can log in to their account by providing the User-id and Password. The
customer can update their billing/shipping address, their personal information,
change passwords, view all the orders placed, view order status, update the
orders placed, view their personalized messages, send feedback to the
administrator etc. In short, the customer gets the complete freedom of
managing his own account without any interference by anyone.

 Easy Navigation and Silent Features

This module consists of the all the navigational features, which makes
shopping very easy and efficient for the customer. The customer can browse
any product according to its category. A total of 9 categories like Mobiles,
Computers, Jewelry, Watches, and Toys/Games etc. are placed here. The
customer is free to select any product of his choice from these categories.
Clicking the name of any product opens a new page, which shows the detailed
description that product. The user can add that product to the cart or directly
buy that product using the “Buy Now” button.

Computer Department 55
E-Commerce Application Implementation Planning and Details

The search capability allows the user to search exactly what they
desire. The user can search directly through the categories or by entering the
keywords. The shopping cart summary serves as a reference for the customer
as they continue to browse for more products.

 Administrative Control Center

All the admin related controls are presented in this module. The web-
based Administration Area allows the admin to configure every aspect of the
e-store.

The admin can view and process the orders online. He can also edit all
aspects of an order after it has been placed. He can also check the inventory
system with the controls present in this module. The total vendor management
also rests with him. He can enable or disable any feature of the e-store. In fact,
he has total control over each and every functionality of the system.

 Product Management

This module manages all the facilities featuring the products. It allows
the admin to create a whole new category of products with descriptions,
keywords and images. New products along with their descriptions and images
can be added very easily into it. The prices of the products can also be stated
from here. All the products having special sales offer during the festivals and
occasions are configurable from the controls found in this module. Adding
discounts in percentage and re-calculating the discounted price is managed
here. This module also manages other features like putting a product as “Hot
Product”, “Inactive Product” etc.

 Payment Gateways

Once the customer completes shopping and checks out, the controls are
transferred to the payment module. All the payment related functions are
handled by this module. It offers different modes of payment and the customer
can select anyone preferable to him. He can either send a cheque or a DD to
the mentioned address to complete the payment or pay online using the credit
cards like Master card, Visa card, American express etc. The Pay Pal facility
can also be accessed for payment purpose.

6.3 SECURITY FEATURES

Security is the condition of being protected against danger or loss. In the

general sense, security is a concept similar to safety. So every application has to be
secured against hackers or anonymous access of it. Our project contains two security
features, of which one is password protection and the other is session state.

Computer Department 56
E-Commerce Application Implementation Planning and Details

Password Protection

Every user who is to be allowed to access the project is given his own
username and password and given his own access rights so that only authorized and
authenticated users can access the project. Also the password is not directly stored in
the database to prevent hacking.

Session State

The additional and the most efficient security feature that is added in this
project is the session state. Every time a new user logs in, a new session is created.
This session is specific for a particular user. All the transactions done by a user are
found here. But once the user logs out, the session is cleared. Once the session is
cleared, it can’t be retrieved again. This minimizes the chances of hacking ones
account or any other misuse. This becomes too safe as compared to other features
because the sessions are unique.

6.4 CODING STANDARDS

Variables

A variable is a named data item whose value can change during program
execution.

Variable Declaration Format

A variable must be declared in the following format:

Data Type Varname;

Rules

Variable declaration must follow these rules:

 A variable name can have a maximum of 32 characters.

 When more than one variable name is specified in a single declaration, the
names must be separated by commas.
 Variable name should start with character, not with digit or special character
(like _, -,*) etc.
 No other special characters except underscore (_) are allowed in declaring a
variable name.
 No white spaces are allowed.

Computer Department 57
E-Commerce Application Implementation Planning and Details

6.5 SAMPLE CODING

The coding of few of the pages is given below:

1.) Home page

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class Home : System.Web.UI.Page

{
SqlConnection cn;
SqlDataAdapter da;
DataSet ds;

protected void Page_Load(object sender, EventArgs e)

{
cn = new
SqlConnection(ConfigurationManager.AppSettings["CyberMall"].ToString());
cn.Open();
da = new SqlDataAdapter("select * from feat_prod_master", cn);
ds = new DataSet();
da.Fill(ds, "feat_prod_master");
DataList1.DataSource = ds.Tables["feat_prod_master"];
DataList1.DataBind();
cn.Close();
}
protected void DataList1_ItemCommand(object source,
DataListCommandEventArgs e)
{
if (e.CommandName == "advertsment")
{
Response.Redirect("ProDetails.aspx?ad=" +
DataList1.DataKeys[e.Item.ItemIndex].ToString() + "");
}
}
protected void DataList2_ItemCommand(object source,
DataListCommandEventArgs e)
{
if (e.CommandName == "discount")
{
Response.Redirect("ProDetails2.aspx?dispro=" +
DataList2.DataKeys[e.Item.ItemIndex].ToString() + "");
}
}
}

Computer Department 58
E-Commerce Application Implementation Planning and Details

2.) Login page

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class LogIn : System.Web.UI.Page

{
SqlConnection cn;
SqlCommand cmd;
SqlDataReader dr;

protected void Page_Load(object sender, EventArgs e)

{
cn = new
SqlConnection(ConfigurationManager.AppSettings["CyberMall"].ToString());
}
protected void btnsignin_Click(object sender, EventArgs e)
{
cmd = new SqlCommand("select username from user_master where
username= '"+tbuname.Text.ToString()+"'and password=
'"+tbpsw.Text.ToString()+"'",cn);
cn.Open();
dr = cmd.ExecuteReader();
if (dr.Read() == true)
{
Session["UserName"] = tbuname.Text;
Response.Redirect("MyAccount.aspx");
}
else
{
Label10.Text = "Invalid Username or Password";
}
}
}

Computer Department 59
E-Commerce Application Implementation Planning and Details

3.) Order details page

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class OrderDetails : System.Web.UI.Page

{
SqlConnection cn;
SqlDataAdapter da;
DataSet ds;

protected void Page_Load(object sender, EventArgs e)

{
cn = new
SqlConnection(ConfigurationManager.AppSettings["CyberMall"].ToString());

string order_id = Request.QueryString["ono"].ToString();

cn.Open();
da = new SqlDataAdapter("Select
o_p_id,o_p_name,o_p_quantity,o_p_amount from ordered_product_master
where order_id = '"+ order_id.ToString() +"' and o_username='"+
Session["UserName"].ToString() +"'",cn);
ds = new DataSet();
da.Fill(ds,"ordered_product_master");
cn.Close();
GridView1.DataSource = ds.Tables["ordered_product_master"];
GridView1.DataBind();
}
}

Computer Department 60
E-Commerce Application Implementation Planning and Details

4.) Payment page

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class Payment : System.Web.UI.Page

{
SqlConnection cn;
SqlCommand cmd;

protected void Page_Load(object sender, EventArgs e)

{
cn = new
SqlConnection(ConfigurationManager.AppSettings["CyberMall"].ToString());
}
protected void btncmp_Click(object sender, EventArgs e)
{
string order = Request.QueryString["order"].ToString();
if (rbcd.Checked == true)
{
cmd = new SqlCommand("Insert Into payment_master
(pay_order_no,pay_mode,pay_username)
values('"+order+"','Cheque/DD','"+Session["UserName"].ToString()+"')",cn);
cn.Open();
cmd.ExecuteNonQuery();
cn.Close();

Response.Redirect("CDPayment.aspx");
}
else if (rbmaster.Checked == true)
{
cmd = new SqlCommand("Insert Into payment_master
(pay_order_no,pay_mode,pay_username) values('" + order + "','Master
Card','" + Session["UserName"].ToString() + "')", cn);
cn.Open();
cmd.ExecuteNonQuery();
cn.Close();

Response.Redirect("CardPayment.aspx?card=Master Card");
}
else if (rbamerican.Checked == true)
{
cmd = new SqlCommand("Insert Into payment_master
(pay_order_no,pay_mode,pay_username) values('" + order + "','American
Express','" + Session["UserName"].ToString() + "')", cn);
cn.Open();
cmd.ExecuteNonQuery();
cn.Close();

Computer Department 61
E-Commerce Application Implementation Planning and Details

Response.Redirect("CardPayment.aspx?card=American Express");
}
else
{
cmd = new SqlCommand("Insert Into payment_master
(pay_order_no,pay_mode,pay_username) values('" + order + "','Visa Card','"
+ Session["UserName"].ToString() + "')", cn);
cn.Open();
cmd.ExecuteNonQuery();
cn.Close();

Response.Redirect("CardPayment.aspx?card=Visa Card");
}
}
}

Computer Department 62
E-Commerce Application Implementation Planning and Details

5.) Feedback page

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class Feedback : System.Web.UI.Page

{
SqlConnection cn;
SqlCommand cmd;

protected void Page_Load(object sender, EventArgs e)

{
cn = new
SqlConnection(ConfigurationManager.AppSettings["CyberMall"].ToString());
}
protected void btnsend_Click(object sender, EventArgs e)
{
if (Session["UserName"].ToString() == "")
{
Label4.Text = "Sign In to submit your Feedback";
}
else
{
cn.Open();
cmd = new SqlCommand("Insert into feedback_master
(username,subject,message,datetime) values('" +
Session["UserName"].ToString() + "','" + tbsub.Text.ToString() + "','" +
tbmsg.Text.ToString() + "','" + System.DateTime.Now.ToString() + "')",
cn);
cmd.ExecuteNonQuery();
cn.Close();
Label4.Text = "Feedback Sent Successfully";
}
}
}

Computer Department 63