using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Linq;
using System.Text;
using System.Threading.Tasks;
using System.Windows.Forms;
using System.Data.SqlClient;
using System.Globalization;
using System.IO;
using System.Net.NetworkInformation;
namespace Quanlibanquanao
public partial class staff : Form
SqlConnection conn;
public staff()
InitializeComponent();
createConnection();
}
private void createConnection()
try
String stringConnection = "Server=DESKTOP-TMCDUUR\\LUCKDAT;Database=ASM2;
Integrated Security = true";
conn = new SqlConnection(stringConnection);
MessageBox.Show(" Connection Successful");
catch (Exception ex)
MessageBox.Show(" Erorr createconnection " + ex.Message);
// Toàn bộ code của phần Prorduct bao gồm ( Search).
private void DisplayDataProduct()
try
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
string sql = "select * from product";
cmd.CommandText = sql;
cmd.ExecuteNonQuery();
DataTable data = new DataTable();
SqlDataAdapter da = new SqlDataAdapter(cmd);
da.Fill(data);
dgvproduct.DataSource = data;
MessageBox.Show("Successful");
conn.Close();
catch (Exception ex)
MessageBox.Show("Erorr DisplayData Product" + ex.Message);
finally
if (conn.State == ConnectionState.Open)
conn.Close();
private void product_Click(object sender, EventArgs e)
DisplayDataProduct();
}
private void SearchProduct(string productId)
try
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
string sql = "SELECT productId, productName, category, size, color, price, stockQuantity,
description, imageData FROM product WHERE productId = @productId";
cmd.CommandText = sql;
cmd.Parameters.Add("@productId", SqlDbType.Int);
cmd.Parameters["@productId"].Value = productId;
SqlDataReader reader = cmd.ExecuteReader();
if (reader.Read())
string productIdResult = reader["productId"].ToString();
string productNameResult = reader["productName"].ToString();
string categoryResult = reader["category"].ToString();
string sizeResult = reader["size"].ToString();
string colorResult = reader["color"].ToString();
string priceResult = reader["price"].ToString();
string stockQuantityResult = reader["stockQuantity"].ToString();
string descriptionResult = reader["description"].ToString();
byte[] imageData = (byte[])reader["imageData"];
using (MemoryStream ms = new MemoryStream(imageData))
pictureBoxProduct.Image = Image.FromStream(ms);
MessageBox.Show("Product Id: " + productIdResult + "\n" +
"Product Name: " + productNameResult + "\n" +
"Category: " + categoryResult + "\n" +
"Size: " + sizeResult + "\n" +
"Color: " + colorResult + "\n" +
"Price: " + priceResult + "\n" +
"Stock Quantity: " + stockQuantityResult + "\n" +
"Description: " + descriptionResult);
else
MessageBox.Show("No product found with this product Id.");
conn.Close();
catch (Exception ex)
MessageBox.Show("Lỗi khi lấy thông tin Product theo ProductId: " + ex.Message);
}
private void btnsearchProduct_Click(object sender, EventArgs e)
string productId = txtproductId.Text;
SearchProduct(productId);
DisplayDataProduct();
private DataTable GetFilteredProducts(string category, decimal? minPrice, decimal? maxPrice)
if (conn.State == ConnectionState.Closed)
conn.Open();
StringBuilder query = new StringBuilder("SELECT * FROM product WHERE 1 = 1");
if (!string.IsNullOrEmpty(category))
query.Append(" AND category LIKE @category");
if (minPrice.HasValue)
query.Append(" AND price >= @minPrice");
if (maxPrice.HasValue)
{
query.Append(" AND price <= @maxPrice");
using (SqlCommand command = new SqlCommand(query.ToString(), conn))
if (!string.IsNullOrEmpty(category))
command.Parameters.Add(new SqlParameter("@category", SqlDbType.VarChar) { Value = "%"
+ category + "%" });
if (minPrice.HasValue)
command.Parameters.Add(new SqlParameter("@minPrice", SqlDbType.Decimal) { Value =
minPrice.Value });
if (maxPrice.HasValue)
command.Parameters.Add(new SqlParameter("@maxPrice", SqlDbType.Decimal) { Value =
maxPrice.Value });
DataTable dt = new DataTable();
try
SqlDataAdapter adapter = new SqlDataAdapter(command);
adapter.Fill(dt);
}
catch (Exception ex)
MessageBox.Show("Lỗi khi truy vấn dữ liệu: " + ex.Message);
finally
conn.Close();
return dt;
private void btnfilter_Click(object sender, EventArgs e)
string categoryFilter = txtcategory1.Text.Trim();
string minPriceText = txtminPrice.Text.Trim();
string maxPriceText = txtmaxPrice.Text.Trim();
decimal? minPrice = string.IsNullOrWhiteSpace(minPriceText) ? (decimal?)null :
Convert.ToDecimal(minPriceText);
decimal? maxPrice = string.IsNullOrWhiteSpace(maxPriceText) ? (decimal?)null :
Convert.ToDecimal(maxPriceText);
DataTable filteredProducts = GetFilteredProducts(categoryFilter, minPrice, maxPrice);
if (filteredProducts.Rows.Count == 0)
MessageBox.Show("Không tìm thấy sản phẩm nào phù hợp với tiêu chí lọc.");
dgvproduct.DataSource = null;
else
dgvproduct.DataSource = filteredProducts;
private void btnexitProduct_Click(object sender, EventArgs e)
DialogResult result = MessageBox.Show("Exit ?", "Ok", MessageBoxButtons.YesNo,
MessageBoxIcon.Question);
if (result == DialogResult.Yes)
Application.Exit();
else
return;
// Toàn bộ code của phần customer bao gồm (Create , Edit, Delete, Search).
private void DisplayDataCustomer()
try
{
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
string sql = "select * from customer";
cmd.CommandText = sql;
cmd.ExecuteNonQuery();
DataTable data = new DataTable();
SqlDataAdapter da = new SqlDataAdapter(cmd);
da.Fill(data);
dgvcustomer.DataSource = data;
MessageBox.Show("Successful");
conn.Close();
catch (Exception ex)
MessageBox.Show(" Erorr DisplayData Customer" + ex.Message);
finally
if (conn.State == ConnectionState.Open)
conn.Close();
}
private void customer_Click_1(object sender, EventArgs e)
DisplayDataCustomer();
private void CreateCustomer()
try
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
String sql = " INSERT INTO customer (fullName, email, phoneNumber, address) VALUES
(@fullName, @email, @phoneNumber, @address)";
cmd.Parameters.Add("@fullName", SqlDbType.VarChar);
cmd.Parameters["@fullName"].Value = txtfullNamec.Text.ToString();
cmd.Parameters.Add("@email", SqlDbType.VarChar);
cmd.Parameters["@email"].Value = txtemailc.Text.ToString();
cmd.Parameters.Add("@phoneNumber", SqlDbType.VarChar);
cmd.Parameters["@phoneNumber"].Value = txtphoneNumberc.Text.ToString();
cmd.Parameters.Add("@address", SqlDbType.Text);
cmd.Parameters["@address"].Value = txtaddressc.Text;
cmd.CommandText = sql;
cmd.ExecuteNonQuery();
MessageBox.Show(" Successful Create Customer");
conn.Close();
catch (Exception ex)
MessageBox.Show(" Erorr Create Customer " + ex.Message);
private void btncreateCustomer_Click_1(object sender, EventArgs e)
DisplayDataCustomer();
CreateCustomer();
private void DeleteCustomer()
try
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
String sql = " DELETE FROM customer WHERE customerId = @customerId";
cmd.Parameters.Add("@customerId", SqlDbType.Int);
cmd.Parameters["@CustomerId"].Value = Convert.ToInt32(txtcustomerId.Text.ToString());
cmd.CommandText = sql;
cmd.ExecuteNonQuery();
MessageBox.Show(" Successful Delete");
conn.Close();
catch (Exception ex)
MessageBox.Show(" Erorr Delete Customer " + ex.Message);
private void btndeleteCustomer_Click_1(object sender, EventArgs e)
String customerId = btndeleteCustomer.Text.ToString();
DialogResult re = MessageBox.Show(" Delete " + customerId, "Ok",
MessageBoxButtons.YesNo, MessageBoxIcon.Question);
if (re == DialogResult.Yes)
DisplayDataCustomer();
DeleteCustomer();
DisplayDataCustomer();
DeleteCustomer();
}
private void EditCustomer()
try
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
string sql = "UPDATE customer SET fullName = @fullName, email = @email, phoneNumber =
@phoneNumber, address = @address WHERE customerId = @customerId";
cmd.Parameters.Add("@customerId", SqlDbType.Int);
cmd.Parameters["@customerId"].Value = Convert.ToInt32(txtcustomerId.Text.ToString());
cmd.Parameters.Add("@fullName", SqlDbType.VarChar);
cmd.Parameters["@fullName"].Value = txtfullNamec.Text.ToString();
cmd.Parameters.Add("@email", SqlDbType.VarChar);
cmd.Parameters["@email"].Value = txtemailc.Text.ToString();
cmd.Parameters.Add("@phoneNumber", SqlDbType.VarChar);
cmd.Parameters["@phoneNumber"].Value = txtphoneNumberc.Text.ToString();
cmd.Parameters.Add("@address", SqlDbType.Text);
cmd.Parameters["@address"].Value = txtaddressc.Text;
cmd.CommandText = sql;
cmd.ExecuteNonQuery();
MessageBox.Show(" Successfu Edit ");
conn.Close();
}
catch (Exception ex)
MessageBox.Show(" Erorr Edit");
private void btneditCustomer_Click_1(object sender, EventArgs e)
DisplayDataCustomer();
EditCustomer();
private void SearchCustomer(string customerId)
try
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
string sql = "SELECT customerId, fullName, email, phoneNumber, address FROM customer
WHERE customerId = @customerId";
cmd.CommandText = sql;
cmd.Parameters.Add("@customerId", SqlDbType.Int);
cmd.Parameters["@customerId"].Value = customerId;
SqlDataReader reader = cmd.ExecuteReader();
if (reader.Read())
string customerIdResult = reader["customerId"].ToString();
string fullNameResult = reader["fullName"].ToString();
string emailResult = reader["email"].ToString();
string phoneNumberResult = reader["phoneNumber"].ToString();
string addressResult = reader["address"].ToString();
MessageBox.Show("Customer Id: " + customerIdResult + "\n" +
"Full Name: " + fullNameResult + "\n" +
"Email: " + emailResult + "\n" +
"Phone Number: " + phoneNumberResult + "\n" +
"Address: " + addressResult);
else
MessageBox.Show("Successful Search");
conn.Close();
catch (Exception ex)
MessageBox.Show("Erorr Search: " + ex.Message);
}
}
private void btnsearchCustomer_Click_1(object sender, EventArgs e)
string customerId = txtcustomerId.Text;
SearchCustomer(customerId);
DisplayDataCustomer();
private void btnexitCustomer_Click(object sender, EventArgs e)
DialogResult result = MessageBox.Show("Exit ?", "Ok", MessageBoxButtons.YesNo,
MessageBoxIcon.Question);
if (result == DialogResult.Yes)
Application.Exit();
else
return;
private void btnexitOrder_Click(object sender, EventArgs e)
DialogResult result = MessageBox.Show("Exit ?", "Ok", MessageBoxButtons.YesNo,
MessageBoxIcon.Question);
if (result == DialogResult.Yes)
Application.Exit();
else
return;
private void DisplayDataOrder()
try
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
string sql = "select * from orders";
cmd.CommandText = sql;
cmd.ExecuteNonQuery();
DataTable data = new DataTable();
SqlDataAdapter da = new SqlDataAdapter(cmd);
da.Fill(data);
dgvorder.DataSource = data;
MessageBox.Show("Successfull");
conn.Close();
catch (Exception ex)
MessageBox.Show(" Erorr DisplayData Order" + ex.Message);
finally
if (conn.State == ConnectionState.Open)
conn.Close();
private void order_Click_1(object sender, EventArgs e)
DisplayDataOrder();
private void CreateOrder()
try
{
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
string sql = "INSERT INTO orders (orderDate,customerId, staffId, totalAmount) VALUES
(@orderDate, @customerId, @staffId, @totalAmount)";
if (DateTime.TryParse(txtorderDate.Text, out DateTime orderDate))
cmd.Parameters.Add("@orderDate", SqlDbType.Date);
cmd.Parameters["@orderDate"].Value = orderDate;
else
throw new Exception(" Erorr Order Date");
cmd.Parameters.Add("@totalAmount", SqlDbType.Decimal);
cmd.Parameters["@totalAmount"].Value = txttotalAmount.Text.ToString();
cmd.Parameters.Add("@staffId", SqlDbType.Int);
cmd.Parameters["@staffId"].Value = Convert.ToInt32(txtstaffIdo.Text.ToString());
cmd.Parameters.Add("@customerId", SqlDbType.Int);
cmd.Parameters["@customerId"].Value = Convert.ToInt32(txtcustomerIdo.Text.ToString());
cmd.CommandText = sql;
cmd.ExecuteNonQuery();
MessageBox.Show("Successful Create");
}
catch (Exception ex)
MessageBox.Show("Erorr Create: " + ex.Message);
finally
if (conn.State == System.Data.ConnectionState.Open)
conn.Close();
private void btncreateOrder_Click(object sender, EventArgs e)
DisplayDataOrder();
CreateOrder();
private void DeleteOrder()
try
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
String sql = " DELETE FROM orders WHERE orderId = @orderId";
cmd.Parameters.Add("@orderId", SqlDbType.Int);
cmd.Parameters["@orderId"].Value = Convert.ToInt32(txtorderId.Text.ToString());
cmd.CommandText = sql;
cmd.ExecuteNonQuery();
MessageBox.Show(" Successful Delete");
conn.Close();
catch (Exception ex)
MessageBox.Show(" Erorr Delete Order " + ex.Message);
private void btndeleteOrder_Click(object sender, EventArgs e)
String orderId = btndeleteOrder.Text.ToString();
DialogResult re = MessageBox.Show(" Delete" + orderId, "Ok", MessageBoxButtons.YesNo,
MessageBoxIcon.Question);
if (re == DialogResult.Yes)
DisplayDataOrder();
DeleteOrder();
}
DisplayDataOrder();
DeleteOrder();
private void EditOrder()
try
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
string sql = "UPDATE orders SET orderdate = @orderdate, customerId = @customerId, staffId
= @staffId, totalAmount = @totalAmount WHERE orderId = @orderId";
cmd.Parameters.Add("@orderId", SqlDbType.Int);
cmd.Parameters["@orderId"].Value = Convert.ToInt32(txtorderId.Text.ToString());
if (DateTime.TryParse(txtorderDate.Text, out DateTime orderDate))
cmd.Parameters.Add("@orderDate", SqlDbType.Date);
cmd.Parameters["@orderDate"].Value = orderDate;
else
throw new Exception(" Erorr Order Date");
cmd.Parameters.Add("@totalAmount", SqlDbType.Decimal);
cmd.Parameters["@totalAmount"].Value = txttotalAmount.Text.ToString();
cmd.Parameters.Add("@staffId", SqlDbType.Int);
cmd.Parameters["@staffId"].Value = Convert.ToInt32(txtstaffIdo.Text.ToString());
cmd.Parameters.Add("@customerId", SqlDbType.Int);
cmd.Parameters["@customerId"].Value = Convert.ToInt32(txtcustomerIdo.Text.ToString());
cmd.CommandText = sql;
cmd.ExecuteNonQuery();
MessageBox.Show("Successful Edit ");
conn.Close();
catch (Exception ex)
MessageBox.Show("Erorr Edit");
private void btneditOrder_Click(object sender, EventArgs e)
DisplayDataOrder();
EditOrder();
private void SearchOrder(string orderId)
try
{
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
string sql = "SELECT orderId, orderDate, customerId, staffId, totalAmount FROM orders
WHERE orderId = @orderId";
cmd.CommandText = sql;
cmd.Parameters.Add("@orderId", SqlDbType.Int);
cmd.Parameters["@orderId"].Value = orderId;
SqlDataReader reader = cmd.ExecuteReader();
if (reader.Read())
string orderIdResult = reader["orderId"].ToString();
string orderdateResult = reader["orderDate"].ToString();
string customerIdResult = reader["customerId"].ToString();
string staffIdResult = reader["staffId"].ToString();
string totalmountResult = reader["totalmount"].ToString();
MessageBox.Show("Order Id: " + orderIdResult + "\n" +
"Order Date: " + orderdateResult + "\n" +
"Customer Id: " + customerIdResult + "\n" +
"Staff Id: " + staffIdResult + "\n" +
"Ttal Amount: " + totalmountResult);
else
{
MessageBox.Show("Successful Search.");
conn.Close();
catch (Exception ex)
MessageBox.Show("Erorr Search: " + ex.Message);
private void btnsearchOrder_Click(object sender, EventArgs e)
string orderId = txtorderId.Text;
SearchCustomer(orderId);
DisplayDataCustomer();
private void DisplayDataOrderDetail()
try
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
string sql = "select * from orderDetails";
cmd.CommandText = sql;
cmd.ExecuteNonQuery();
DataTable data = new DataTable();
SqlDataAdapter da = new SqlDataAdapter(cmd);
da.Fill(data);
dgvorderDetails.DataSource = data;
MessageBox.Show("Successful");
conn.Close();
catch (Exception ex)
MessageBox.Show(" Erorr DisplayData Order Details" + ex.Message);
finally
if (conn.State == ConnectionState.Open)
conn.Close();
private void orderDetails_Click(object sender, EventArgs e)
{
DisplayDataOrderDetail();
private void SearchOrderDetail(string orderDetailsId)
try
conn.Open();
SqlCommand cmd = conn.CreateCommand();
cmd.CommandType = System.Data.CommandType.Text;
string sql = "SELECT orderDetailsId, orderId, productId, quantity, price FROM orders WHERE
orderDetailsId = @orderDetailsId";
cmd.CommandText = sql;
cmd.Parameters.Add("@orderDetailsId", SqlDbType.Int);
cmd.Parameters["@orderDetailsId"].Value = orderDetailsId;
SqlDataReader reader = cmd.ExecuteReader();
if (reader.Read())
string orderDetailsIdResult = reader["orderDetailsId"].ToString();
string orderIdResult = reader["orderId"].ToString();
string productIdResult = reader["productId"].ToString();
string quantityResult = reader["quantity"].ToString();
string priceResult = reader["price"].ToString();
MessageBox.Show("Order Details Id: " + orderDetailsIdResult + "\n" +
"Order Id: " + orderIdResult + "\n" +
"Product Id: " + productIdResult + "\n" +
"Quantity: " + quantityResult + "\n" +
"Price: " + priceResult);
else
MessageBox.Show("Successful Search");
conn.Close();
catch (Exception ex)
MessageBox.Show("Erorr Search orderDetalsId: " + ex.Message);
private void btnsearchOrderDetailId_Click(object sender, EventArgs e)
string orderDetailsId = txtorderDetailId.Text;
SearchCustomer(orderDetailsId);
DisplayDataCustomer();
private void btnexitOrderDetails_Click(object sender, EventArgs e)
{
DialogResult result = MessageBox.Show("Exit ?", "Ok", MessageBoxButtons.YesNo,
MessageBoxIcon.Question);
if (result == DialogResult.Yes)
Application.Exit();
else
return;
tại sao khi search product và customer thì đúng, mà search orders và orderDetails thì lại ra thông
tin của customer là sao phải ra thông tin của orders và orderDetails chứ
