asp.net三层例子

  

第一层:

using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Data.SqlClient;
using System.Data;
using System.Configuration;
using System.Collections;

namespace DBUtility
{
    public class sqlhelper
    {
        public static readonly string cnnstring = ConfigurationManager.ConnectionStrings["con"].ConnectionString;
        /// <summary>
        /// 查寻语句
        /// </summary>
        /// <param name="commandtext"></param>
        /// <param name="commandtype"></param>
        /// <param name="param"></param>
        /// <returns></returns>
        public static DataTable ExecuteTable(string commandtext, CommandType commandtype, params SqlParameter[] param)
        {
            using (SqlConnection con = new SqlConnection(cnnstring))
            {
                using (SqlCommand cmd = new SqlCommand(commandtext, con))
                {
                    con.Open();
                    cmd.Parameters.AddRange(param);
                    cmd.CommandType = commandtype;
                    using (SqlDataReader myreader = cmd.ExecuteReader())
                    {
                        DataTable dt = new DataTable();
                        dt.Load(myreader);
                        return dt;
                    }
                }
            }
        }
        /// <summary>
        /// 检查用户不否存在
        /// 判断用户是否登录成功
        /// 登录成功后返回用户的权限,头衔
        /// 
        /// 登录失败第一个元素为0
        /// 第二个元素为错误信息
        ///  
        /// </summary>
        /// <param name="commandtext"></param>
        /// <param name="commandtype"></param>
        /// <param name="param"></param>
        /// <returns></returns>
        public static string[] Check_UserName(string commandtext, CommandType commandtype, params SqlParameter[] param)
        {
            string cnnstring = ConfigurationManager.ConnectionStrings["con"].ConnectionString;
            using (SqlConnection con = new SqlConnection(cnnstring))
            {
                using (SqlCommand cmd = new SqlCommand(commandtext, con))
                {
                    cmd.CommandType = commandtype;     //命令类型的设置
                    cmd.Parameters.AddRange(param);    //参数的添加
                    con.Open();
                    using (SqlDataReader myreader = cmd.ExecuteReader())
                    {
                        DataTable dt = new DataTable();
                        dt.Load(myreader);

                        if (dt.Rows.Count == 0)
                        {
                            string[] str = new string[] { "0", "用户名或密码不正确!" };
                            return str;         //登录失败     返回0
                        }
                        else if (dt.Rows.Count == 1)
                        {
                            string[] str = new string[] { dt.Rows[0][3].ToString(), dt.Rows[0][4].ToString() };
                            return str;         //登录成功     返回权限,职位
                        }
                        else
                        {
                            string[] str = new string[] { "0", "系统数据出现错误!" };  //其它情况返回
                            return str;
                        }
                    }

                }
            }
        }
        /// <summary>
        /// 函数返回"yes"   此行有此值
        /// 函数返回"no"    此行无此值
        /// </summary>
        /// <param name="commandtext"></param>
        /// <param name="commandtype"></param>
        /// <param name="param"></param>
        /// <returns></returns>
        public static string Check_FTHave(string commandtext, CommandType commandtype, params SqlParameter[] param)
        {
            using (SqlConnection con = new SqlConnection(cnnstring))
            {
                using (SqlCommand cmd = new SqlCommand(commandtext, con))
                {
                    con.Open();
                    cmd.Parameters.AddRange(param);
                    using (SqlDataReader myreader = cmd.ExecuteReader())
                    {
                        DataTable dt = new DataTable();
                        dt.Load(myreader);
                        if (dt.Rows.Count == 0)
                        {
                            return "no";
                        }
                        else
                        {
                            return "yes";
                        }

                    }
                }
            }


        }
        /// <summary>
        ///完成数据的增删,改,查,操作
        /// </summary>
        /// <param name="commandtext"></param>
        /// <param name="commandtype"></param>
        /// <param name="param"></param>
        public static void Execute(string commandtext, CommandType commandtype, params SqlParameter[] param)
        {
            using (SqlConnection con = new SqlConnection(cnnstring))
            {
                using (SqlCommand cmd = new SqlCommand(commandtext,con))
                {
                    cmd.CommandType = commandtype;
                    cmd.Parameters.AddRange(param);
                    con.Open();
                    cmd.ExecuteNonQuery();
                }
            }
        
        
        }
        /// <summary>
        /// 此函数返回第一行一列的值
        /// </summary>
        /// <param name="commandtext"></param>
        /// <param name="commandtype"></param>
        /// <param name="param"></param>
        /// <returns></returns>
        public static int Insert_ID(string commandtext, CommandType commandtype, params SqlParameter[] param)
        {
            using (SqlConnection con = new SqlConnection(cnnstring))
            {
                using (SqlCommand cmd = new SqlCommand(commandtext, con))
                {
                    cmd.CommandType = commandtype;
                    cmd.Parameters.AddRange(param);
                    con.Open();
                    return Convert.ToInt32(cmd.ExecuteScalar());
                }
            }
        }
        /// <summary>
        /// 返回一个列表
        /// </summary>
        /// <param name="commandtext"></param>
        /// <param name="commandtype"></param>
        /// <param name="param"></param>
        /// <returns></returns>
        public static ArrayList ExecuteArrayList(string commandtext, CommandType commandtype, params SqlParameter[] param)
        {
            ArrayList list = new ArrayList();
            using (SqlConnection con = new SqlConnection(cnnstring))
            {
                using (SqlCommand cmd = new SqlCommand(commandtext, con))
                {
                    con.Open();
                    cmd.Parameters.AddRange(param);
                    cmd.CommandType = commandtype;
                    using (SqlDataReader myreader = cmd.ExecuteReader())
                    {
                        DataTable dt = new DataTable();
                        dt.Load(myreader);
                        foreach (DataRow item in dt.Rows)
                        {
                            if (!list.Contains(item[2].ToString()))
                            {
                                list.Add(item[2].ToString());
                            }

                        }
                        
                        return list;
                    }
                }
            }
        }

    }
}
第二层:
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using OA.model;
using System.Data;
using System.Data.SqlClient;
using System.Collections;


namespace OA.DAL
{
    public class OADAL
    {
        /// <summary>
        /// 第一个参数name是用户名
        /// 第二个参数password是密码
        /// </summary>
        /// <param name="name"></param>
        /// <param name="password"></param>
        /// <returns></returns>
        public static string[] GetOaData(string name,string password)
        {
            string str = "select * from User_Table where name=@name and password=@pwd";
            string[] user_info = DBUtility.sqlhelper.Check_UserName(str, System.Data.CommandType.Text,new SqlParameter("@name",name),new SqlParameter("pwd",password));
            return user_info;
       }
        /// <summary>
        /// votemaintitle是项目的名称
        /// theme是
        /// </summary>
        /// <param name="votemaintitle"></param>
        //public static void Insert_Vote(string votemaintitle,string theme)
        //{
        //    string str = "insert Vote_MainTitle values(@vote);select @@IDENTITY";
        //    int i = DBUtility.sqlhelper.Insert_ID(str, CommandType.Text, new SqlParameter("@vote",votemaintitle));

        //    string[] them_item = theme.Split(',');               //取出所有主题并写入数据库
        //    int num = 0;                                         //这里显示的是主题Id

        //    foreach (string item in them_item)
        //    {
        //        num++;
        //        string sqlcmd = "insert Vote_Table values(@voteid,@themeid,@themename,0)";
        //        DBUtility.sqlhelper.Execute(sqlcmd, CommandType.Text, 
        //            new SqlParameter("@voteid",i.ToString()),       //
        //            new SqlParameter("@themeid",num.ToString()),    // 
        //            new SqlParameter("@themename",item)             //这里添加的是主题的名称                    
        //            );
             
        //    }

        //  //  string[] user_info = DBUtility.sqlhelper.Check_UserName(str, System.Data.CommandType.Text, new SqlParameter("@name", name), new SqlParameter("pwd", password));
           
        
        //}
        /// <summary>
        /// name表示项目名称
        /// </summary>
        /// <param name="name"></param>
        /// <returns></returns>
        public static void Insert_Vote(string votename)
        {
            string str = "insert Vote_MainTitle values(@vote)";
            string[] user_info = DBUtility.sqlhelper.Check_UserName(str, System.Data.CommandType.Text, new SqlParameter("@vote", votename));
        }
        /// <summary>
        /// 返回VoteMainTitle中的所有名称和值
        /// </summary>
        /// <returns></returns>
        public static DataTable dt()
        {
            string str = "select * from Vote_MainTitle";
            return DBUtility.sqlhelper.ExecuteTable(str,CommandType.Text);
        }
        /// <summary>
        /// voteid为先遣项目里的值
        /// thmeid为当前主题的Id号
        /// themename要插入主题的名称
        /// </summary>
        public static void Insert_theme(string voteid,string themename)
        {
            string str = "insert Vote_Table values(@voteid,@vote_themename)";
            DBUtility.sqlhelper.Execute(str, CommandType.Text, 
                new SqlParameter("@voteid", voteid),  
                new SqlParameter("@vote_themename", themename));
        
        }
        /// <summary>
        /// 返回所有主题的类
        /// </summary>
        /// <returns></returns>
        public static DataTable votedt()
        {
            string str = "SELECT id,VoteMainTitle,Vote_theme FROM VOTE_TABLE v join Vote_MainTitle m on v.VoteId=m.VoteId";
            return DBUtility.sqlhelper.ExecuteTable(str, CommandType.Text);
        }
        public static void Delete_theme(string themeid)
        {
            //            delete from Vote_Table where VoteId='31' and Vote_themeid='1'
            string str = "delete from Vote_Table where id=@voteid";
            DBUtility.sqlhelper.Execute(str, CommandType.Text,
                new SqlParameter("@voteid", themeid)
              );
        }
        /// <summary>
        /// id修改的id号
        /// name修改后的主题名称
        /// voteid项目的名称
        /// </summary>
        /// <param name="voteid"></param>
        /// <param name="themename"></param>
        /// <param name="id"></param>
        public static void repair(string voteid, string themename,string id)
        {
            string str = "update Vote_Table set voteid=@voteid,vote_theme=@name where id=@id";
            DBUtility.sqlhelper.Execute(str, CommandType.Text,
                new SqlParameter("@voteid", voteid),
                new SqlParameter("@name", themename),
                new SqlParameter("@id",id)
                );    

        }
        public static DataTable votedtfind(string str)
        {
            string strs = "SELECT id,VoteMainTitle,Vote_theme FROM VOTE_TABLE v join Vote_MainTitle m on v.VoteId=m.VoteId where Vote_theme=@name";
            return DBUtility.sqlhelper.ExecuteTable(strs, CommandType.Text, new SqlParameter("@name",str));
        }
        /// <summary>
        /// id为删除vote的id
        /// </summary>
        /// <param name="voteid"></param>
        public static void delete_vote(string voteid)
        {
            string str = "delete from Vote_MainTitle where voteid=@id";    //删除项目
             DBUtility.sqlhelper.Execute(str, CommandType.Text, new SqlParameter("@id",voteid));
            string str1 = "delete  from Vote_Table where voteid=@id";               //删除主题
             DBUtility.sqlhelper.Execute(str1, CommandType.Text, new SqlParameter("@id",voteid));
            
        }
        /// <summary>
        /// title要修改的值
        /// id是被修改的id
        /// </summary>
        /// <param name="voteid"></param>
        /// <param name="title"></param>
        public static void repair_vote(string voteid,string title)
        {
            string str = "update Vote_MainTitle set VoteMainTitle=@title where voteid=@voteid";
            DBUtility.sqlhelper.Execute(str, CommandType.Text, new SqlParameter("@title",title),new SqlParameter("@voteid",voteid));
        
        }
        /// <summary>
        /// name是项目的名称
        /// </summary>
        /// <param name="name"></param>
        /// <returns></returns>
         public static DataTable dtfind(string name)
          {
              string str = "select * from Vote_MainTitle where VoteMainTitle=@name";
              return DBUtility.sqlhelper.ExecuteTable(str, CommandType.Text, new SqlParameter("@name", name));
          
          }
        /// <summary>
        /// 主题中查找属于当项目的主题
        /// voteid是项目的值字段
        /// </summary>
        /// <param name="name"></param>
        /// <returns></returns>
         public static DataTable dtfind_vote(string voteid)
         {
             string str = "select * from Vote_Table where VoteId=@voteid";
             return DBUtility.sqlhelper.ExecuteTable(str, CommandType.Text, new SqlParameter("@voteid", voteid));

         }
        /// <summary>
        /// user用户名
        /// themeid主题id
        /// tf用户是否同意
        /// msg 用户的留言
        /// </summary>
        /// <param name="user"></param>
        /// <param name="themeid"></param>
        /// <param name="tf"></param>
        /// <param name="msg"></param>

         public static void writer_voterecord(string user,string themeid,string tf,string msg)
         {
             string sqlcmd = "insert Vote_Record values(@user,@thmeid,@TF,@msg)";
             DBUtility.sqlhelper.ExecuteTable(sqlcmd, CommandType.Text, 
                 new SqlParameter("@user", user),
                 new SqlParameter("@thmeid",themeid),
                 new SqlParameter("@TF",tf),
                 new SqlParameter("@msg",msg)
                 );

         }
        /// <summary>
        /// themeid 是当前主题的id
        /// 返回当前主题的同意票数
        /// </summary>
        /// <param name="themeid"></param>
        /// <returns></returns>
         public static int return_OK(string themeid)
         { 
            string sqlcmd="select count(*) from Vote_Record where Vote_themeid=@themeid and vote_state='1'";
           return DBUtility.sqlhelper.Insert_ID(sqlcmd, CommandType.Text, new SqlParameter("@themeid",themeid));
            
         }

         /// <summary>
         /// themeid 是当前主题的id
         /// 返回当前主题的否定票数
         /// </summary>
         /// <param name="themeid"></param>
         /// <returns></returns>
         public static int return_NO(string themeid)
         {
             string sqlcmd = "select count(*) from Vote_Record where Vote_themeid=@themeid and vote_state='0'";
            return DBUtility.sqlhelper.Insert_ID(sqlcmd, CommandType.Text, new SqlParameter("@themeid", themeid));
         }
        /// <summary>
         /// 返回Vote_Record主题id
        /// </summary>
        /// <returns></returns>
         public static ArrayList ExecuteArrayList()
         {
             string sqlcmd= "select * from Vote_Record order by Vote_themeid";
             return DBUtility.sqlhelper.ExecuteArrayList(sqlcmd,CommandType.Text);
         
         }
        /// <summary>
        /// themeid主题的ID
        /// 
        /// </summary>
        /// <param name="themeid"></param>
        /// <returns></returns>
         public static DataTable dt_recordvote(string themeid)
         { 
           string sqlcmd="select * from Vote_Record where Vote_themeid=@themeid";
           return DBUtility.sqlhelper.ExecuteTable(sqlcmd,CommandType.Text,new SqlParameter("@themeid",themeid));
         }

         public static DataTable dt_record()
         {
             string sqlcmd = "select vt.Vote_theme,Vote_themeid,vm.VoteMainTitle,case vote_state when 1 then '同意'else '不同意'end as vote_TF,count(*) as title from Vote_Record r join Vote_Table vt on r.Vote_themeid=vt.id join Vote_MainTitle vm on vm.VoteId=vt.VoteId group by Vote_themeid,vote_state,vt.Vote_theme,vm.VoteMainTitle";
             return DBUtility.sqlhelper.ExecuteTable(sqlcmd,CommandType.Text);
         
         }
         /// <summary>
         /// 返回所有会议类型
         /// </summary>
         /// <returns></returns>
         public static DataTable dt_mettype()
         {
             string sqlcmd = "select * from metting_tyep";
             return DBUtility.sqlhelper.ExecuteTable(sqlcmd, CommandType.Text);
         
         }
        /// <summary>
        /// 返回所有会议地点
        /// </summary>
        /// <returns></returns>
         public static DataTable dt_metdress()
         {
             string sqlcmd = "select * from Metting_Adress";
             return DBUtility.sqlhelper.ExecuteTable(sqlcmd, CommandType.Text);

         }
         /// <summary>
         /// 返回所有会议召开部门
         /// </summary>
         /// <returns></returns>
         public static DataTable dt_metdepart()
         {
             string sqlcmd = "select * from Metting_department";
             return DBUtility.sqlhelper.ExecuteTable(sqlcmd, CommandType.Text);
         }
        /// <summary>
        /// user 当前操作的用户
        /// mettingtitle会议名称
        /// mettingadress会议的地点
        /// mettingdepartment会议的部门
        /// operperson主持人
        /// starttime会议的开始时间
        /// endtime会议的结束时间
        /// range 会议的范围
        /// mettinaddpersons会议的参加人员
        /// file会议的资料
        /// 是否通知会议管理员
        /// </summary>
        /// <param name="user"></param>
        /// <param name="mettingtitle"></param>
        /// <param name="mettingtype"></param>
        /// <param name="mettingadress"></param>
        /// <param name="mettingdepartment"></param>
        /// <param name="operperson"></param>
        /// <param name="starttime"></param>
        /// <param name="endtime"></param>
        /// <param name="range"></param>
        /// <param name="mettingaddperson"></param>
        /// <param name="mettingdescription"></param>
        /// <param name="file"></param>
        /// <param name="TFadmin"></param>
         public static void Insert_metting(string user,string mettingtitle,string mettingtype,string mettingadress,string mettingdepartment,string operperson,string starttime,string endtime,string range,string mettingaddperson,string mettingdescription,string file,string TFadmin)
         {
           string sqlcmd="insert Metting values(@user,@title,@type,@adress,@department,@operperson,@starttime,@endtime,@range,@mettingperson,@mettingdescription,@file,'0',@tfadmin)";
           DBUtility.sqlhelper.Execute(sqlcmd,CommandType.Text,
               new SqlParameter("@user",user),
               new SqlParameter("@title",mettingtitle),
               new SqlParameter("@type",mettingtype),


                new SqlParameter("@adress",mettingadress),
                new SqlParameter("@department",mettingdepartment),
                new SqlParameter("@operperson",operperson),
                new SqlParameter("@starttime",starttime),

                 new SqlParameter("@endtime",endtime),
                 new SqlParameter("@range",range),
                 new SqlParameter("@mettingperson",mettingaddperson),
                 new SqlParameter("@mettingdescription",mettingdescription),
                 new SqlParameter("@file",file),
                 new SqlParameter("@tfadmin",TFadmin)
 

               
               
               
               );
 
        }
        /// <summary>
        /// 返回metting的所有会议
        /// </summary>
        /// <param name="commandtext"></param>
        /// <param name="commandtype"></param>
        /// <param name="param"></param>
        /// <returns></returns>
         public static DataTable dt_all_metting(string user)
         {
             string sqlcmd = "select  case Metting_state when 1 then '起草中' when 2 then '送审中' when 3 then '已审批' when 4 then '已退回' when 5 then '已完成' end as state, * from metting where Metting_OperName=@user";
            return DBUtility.sqlhelper.ExecuteTable(sqlcmd, CommandType.Text,new SqlParameter("@user",user));
         }
        /// <summary>
        /// 返回不同意类型的会议
        /// state是会议类型即是dropdownlist的selectvelue
        /// </summary>
        /// <param name="state"></param>
        /// <returns></returns>
         public static DataTable dt_all_metting1(string user,string state)
         {

             string sqlcmd = "select  case Metting_state when 1 then '起草中' when 2 then '送审中' when 3 then '已审批' when 4 then '已退回' when 5 then '已完成' end as state, * from metting where Metting_state=@state and Metting_OperName=@user";
             return DBUtility.sqlhelper.ExecuteTable(sqlcmd,CommandType.Text,new SqlParameter("@state",state),new SqlParameter("@user",user));
         }
        /// <summary>
        /// 按会议的id号进行删除操作
        /// </summary>
        /// <param name="id"></param>
         public static void Delete_metting(string id)
         {
             string sqlcmd = "delete from metting where id=@id";
             DBUtility.sqlhelper.Execute(sqlcmd, CommandType.Text, new SqlParameter("@id",id));
         
         }
        /// <summary>
        /// 把相应id的会议进行送审
        /// </summary>
        /// <param name="id"></param>
         public static void SongShen(string id)
         {
             string sqlcmd = "update metting set metting_state=2 where id=@id";
             DBUtility.sqlhelper.Execute(sqlcmd,CommandType.Text,new SqlParameter("@id",id));
         }
        /// <summary>
        /// 这里是进行相应的送审检查
        /// 返回相应的状态
        /// </summary>
        /// <param name="id"></param>

         public static string SongSheng_Check(string id)
         {
             string sqlcmd = "select * from metting where id=@id and (metting_state=2 or Metting_State=3 or Metting_State=4 or Metting_State=5)";
             return DBUtility.sqlhelper.Check_FTHave(sqlcmd, CommandType.Text, new SqlParameter("@id",id));
         }
        /// <summary>
        /// 显示所有送审的会议
        /// </summary>
        /// <returns></returns>

         public static DataTable dt_all_metting_admin()
         {
             string sqlcmd = "select  case Metting_state when 1 then '起草中' when 2 then '送审中' when 3 then '已审批' when 4 then '已退回' when 5 then '已完成' end as state, * from metting where Metting_state=2";
             return DBUtility.sqlhelper.ExecuteTable(sqlcmd, CommandType.Text);

         }
         /// <summary>
         ///  user为管理员有名称就是当前登录的用户
         /// 允许会议开id为批准的会议Id号
         /// state为用户是批准还是退回
         /// 3为批准
         /// 4退回
         /// 
         /// 并记录当前管理员批准的记录
        /// </summary>
        /// <param name="user"></param>
        /// <param name="id"></param>
        /// <param name="state"></param>
         public static void Metting_All(string user,string id,string state)
         {
             string sqlcmd = "update metting set Metting_state=@state where id=@id";
             DBUtility.sqlhelper.Execute(sqlcmd,CommandType.Text,
                 new SqlParameter("@id",id),
                 new SqlParameter("@state",state));
             ///以以上记录用户同意了哪此会议
             string sqlcmdInsert = "insert Metting_set_record values(@user,@id,@state)";
             DBUtility.sqlhelper.Execute(sqlcmdInsert, CommandType.Text, 
                 new SqlParameter("@user", user), 
                 new SqlParameter("@id", id), 
                 new SqlParameter("@state", state));
         }
        /// <summary>
        /// 返回当前管理员操作的记录
        /// user为当前管理员登录的用户名
        /// </summary>
        /// <param name="user"></param>
        /// <returns></returns>
         public static DataTable Metting_Owner_All(string user)
         { 
          string sqlcmd="select * from  Metting_set_record where username=@user";
          return DBUtility.sqlhelper.ExecuteTable(sqlcmd,CommandType.Text,new SqlParameter("@user",user));
         
         }
        /// <summary>
        /// 这里是返加管理员的操作记录
        /// user为管理员名字母
        /// state为要反加的两种状态
        /// state为3的时候 是返回管理员批准的会议
        /// state为4的时候 是返回管事员退回的会议
        /// </summary>
        /// <param name="user"></param>
        /// <param name="state"></param>
        /// <returns></returns>

         public static DataTable dt_Mettin_Record(string user,string state)
         {
             string sqlcmd = "select  case Metting_state when 1 then '起草中' when 2 then '送审中' when 3 then '已审批' when 4 then '已退回' when 5 then '已完成' end as state,* from Metting_set_record r join Metting m on r.mettingid=m.id where r.username=@user and r.mettingstate=@state";
             return DBUtility.sqlhelper.ExecuteTable(sqlcmd, CommandType.Text, new SqlParameter("@user",user),new SqlParameter("@state",state));
         
         }
        /// <summary>
        /// 返回当前用户的的所有会议操作
        /// user 为当的用户
        /// </summary>
        /// <param name="user"></param>
        /// <returns></returns>

         public static DataTable dt_Mettin_All_Record(string user)
         {
             string sqlcmd = "select case Metting_state when 1 then '起草中' when 2 then '送审中' when 3 then '已审批' when 4 then '已退回' when 5 then '已完成' end as state,* from Metting_set_record r join Metting m on r.mettingid=m.id where r.username=@user";
             return DBUtility.sqlhelper.ExecuteTable(sqlcmd, CommandType.Text, new SqlParameter("@user", user));

         }
         /// <summary>
         /// 返回所有要参加的会议
         /// </summary>
         /// <returns></returns>
         public static DataTable dt_Metting_GO()
         {
             string sqlcmd = "select case Metting_state when 1 then '起草中' when 2 then '送审中' when 3 then '已审批' when 4 then '已退回' when 5 then '已完成' end as state,* from metting where Metting_state=3";
             return DBUtility.sqlhelper.ExecuteTable(sqlcmd, CommandType.Text);
         
         }
        /// <summary>
        /// 修改用户的密码
        /// user为用户名
        /// pwd为用户的新密码
        /// </summary>
        /// <param name="user"></param>
         public static void User_Pwd(string user,string pwd)
         {
             string sqlcmd = "update User_Table set password = @pwd";
             DBUtility.sqlhelper.Execute(sqlcmd,CommandType.Text,new SqlParameter("@user",user),new SqlParameter("@pwd",pwd));
         
         }
        /// <summary>
        /// 查看用户是否存在
        /// </summary>
        /// <param name="name"></param>
        /// <param name="pwd"></param>
        /// <returns></returns>

         public static string returnuserYN(string name,string pwd)
         { 
         string sqlcmd="select * from user where name=@name and password=@pwd";
         return DBUtility.sqlhelper.Check_FTHave(sqlcmd,
             CommandType.Text,
             new SqlParameter("@name",name),
             new SqlParameter("@pwd",pwd));

         
         }
        /// <summary>
        /// 返回用户的个人资料
        /// </summary>
        /// <param name="user"></param>
        /// <returns></returns>

         public static DataTable dt_user_zl(string user)
         {
             string sqlcmd = "select * from User_ZiLiao where username=@user";
             return DBUtility.sqlhelper.ExecuteTable(sqlcmd,CommandType.Text,new SqlParameter("@user",user));
         
         }
        /// <summary>
        /// 修改用户的个人资料
        /// user为用户名
        /// sex为性别
        /// minzu为民族
        /// photo为照片
        /// memeo个人说明
        /// </summary>
        /// <param name="user"></param>
        /// <param name="sex"></param>
        /// <param name="phone"></param>
        /// <param name="minzu"></param>
        /// <param name="photo"></param>
        /// <param name="memeo"></param>

         public static void Insert_user_zl(string user,string sex,string phone,string minzu,string photo,string memeo)
         {
             string sqlcmd = "update User_ziliao set usersex=@sex,userphone=@phone,userminzu=@minzu,userphoto=@photo,usermemo=@memo where username=@user";
             DBUtility.sqlhelper.Execute(sqlcmd,CommandType.Text,
                 new SqlParameter("@sex",sex),
                 new SqlParameter("@phone",phone),
                 new SqlParameter("@minzu",minzu),
                 new SqlParameter("@photo",photo),
                 new SqlParameter("@memo",memeo),
                 new SqlParameter("@user",user)
                  );       
         }
        /// <summary>
        /// user为当前的用户名
        /// title记事本的题目
        /// contetn记事本的内容
        /// datetime记事本的时间
        /// </summary>
        /// <param name="user"></param>
        /// <param name="title"></param>
        /// <param name="contetn"></param>
        /// <param name="datetime"></param>

         public static void Insert_Note(string user,string title,string contetn,string datetime)
         {
             string sqlcmd = "insert Note_record values(@user,@title,@content,@datetime)";
             DBUtility.sqlhelper.Execute(sqlcmd,CommandType.Text,
                 new SqlParameter("@user",user),
                 new SqlParameter("@title",title),
                 new SqlParameter("@content",contetn),
                 new SqlParameter("@datetime",datetime)
            
                 
                 );
         
         }
        /// <summary>
        /// 记事的id号
        /// </summary>
        /// <param name="id"></param>
        /// <returns></returns>

         public static DataTable Note_Record(string id)
         {

             string sqlcmd = "select * from Note_record where id= @id";
             return DBUtility.sqlhelper.ExecuteTable(sqlcmd,CommandType.Text,new SqlParameter("@id",id));
         
         }
         /// <summary>
         /// title为记事本的题目
         /// content为记事本的内容
         /// time为记事本的时间
         /// id为记事的标识(唯一)
         /// </summary>
         /// <param name="title"></param>
         /// <param name="content"></param>
         /// <param name="time"></param>
         /// <param name="id"></param>
         public static void Update_Note(string title,string content,string time,string id)
         {
             string sqlcmd = "update Note_record set Note_Title=@title,Note_Content=@content,Note_Datetime=@time where id=@id";
             DBUtility.sqlhelper.Execute(sqlcmd,CommandType.Text,
                new SqlParameter("@title",title),
                new SqlParameter("@content",content),                 
                new SqlParameter("@time",time), 
                new SqlParameter("@id",id)
  
                 
                 );
         
         }

         

    }
}

第三层:
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using OA.model;
using OA.DAL;
using System.Data;
using System.Collections;
 
namespace OABLL
{
    public class OABL
    {
        /// <summary>
        /// 第一个参数name是用户名
        /// 第二个参数password是密码
        /// </summary>
        /// <param name="name"></param>
        /// <param name="password"></param>
        /// <returns></returns>
        public static string[] GetOaData(string name,string password)
        {
            return OADAL.GetOaData(name, password);
            //返回用户状态
        }
        /// <summary>
        /// 添加项目名称
        /// 参数votename为您要添加的项目名称
        /// </summary>
        /// <param name="votename"></param>
        public static void Insert_Vote(string votename)
        {
            OADAL.Insert_Vote(votename);
        }
        /// <summary>
        /// 返回所有的 Vote_MainTitle中的数据
        /// </summary>
        /// <returns></returns>
        public static DataTable dt()
        {
            return OADAL.dt();
 
        }
        /// <summary>
        /// voteid为选择中项目里的值
        /// thmeid为当前主题的Id号
        /// themename要插入主题的名称
        /// </summary>
        /// <param name="voteid"></param>
        /// <param name="themeid"></param>
        /// <param name="themename"></param>
        /// 
        public static void Insert_theme(string voteid,  string themename)
        {
            OADAL.Insert_theme(voteid,themename);
        }
        public static DataTable votedt()
        {
            return OADAL.votedt();
        }
        /// <summary>
        /// voteid 为当前项目的ID
        /// themeid 为当前主题ID
        /// </summary>
        /// <param name="votename"></param>
        /// <param name="votetheme"></param>
        public static void Delete_theme(string themeid)
        {
            OADAL.Delete_theme(themeid);   
        }
        /// <summary>
        /// id修改的id号
        /// name修改后的主题名称
        /// voteid项目的名称
        /// </summary>
        /// <param name="voteid"></param>
        /// <param name="themename"></param>
        /// <param name="id"></param>
        public static void repair(string voteid, string themename, string id)
        {
            OADAL.repair(voteid, themename, id);
        
        }
        public static DataTable votedtfind(string str)
        {
            return OADAL.votedtfind(str);
        }
        /// <summary>
        /// 删除项目为要删除项目的ID 
        /// </summary>
        /// <param name="voteid"></param>
         public static void delete_vote(string voteid)
         {
               OADAL.delete_vote(voteid);
         }
         /// <summary>
         /// title要修改的值
         /// id是被修改的id
         /// </summary>
         /// <param name="voteid"></param>
         /// <param name="title"></param>
         public static void repair_vote(string voteid, string title)
         {
             OADAL.repair_vote(voteid,title);
         }
        /// <summary>
        /// name是项目名称
        /// </summary>
        /// <param name="name"></param>
        /// <returns></returns>
         public static DataTable dtfind(string name)
         {
           return OADAL.dtfind(name);
         }

         public static DataTable dtfind_vote(string voteid)
         {
             return OADAL.dtfind_vote(voteid);
         }

         /// <summary>
         /// user用户名
         /// themeid主题id
         /// tf用户是否同意
         /// msg 用户的留言
         /// </summary>
         /// <param name="user"></param>
         /// <param name="themeid"></param>
         /// <param name="tf"></param>
         /// <param name="msg"></param>
         public static void writer_voterecord(string user, string themeid, string tf, string msg)
         {
             OADAL.writer_voterecord(user, themeid, tf, msg);    
         }

         /// <summary>
         /// themeid 是当前主题的id
         /// 返回当前主题的同意票数
         /// </summary>
         /// <param name="themeid"></param>
         /// <returns></returns>
         public static int return_OK(string themeid)
         {
             return OADAL.return_OK(themeid);
         }
         /// <summary>
         /// themeid 是当前主题的id
         /// 返回当前主题的否定票数
         /// </summary>
         /// <param name="themeid"></param>
         /// <returns></returns>
         public static int return_NO(string themeid)
         {
             return OADAL.return_NO(themeid);
         }
         /// <summary>
         /// 返回Vote_Record主题id
         /// </summary>
         /// <returns></returns>
         public static ArrayList ExecuteArrayList()
         {
             return OADAL.ExecuteArrayList();
         }
         /// <summary>
         /// themeid主题的ID
         /// 
         /// </summary>
         /// <param name="themeid"></param>
         /// <returns></returns>
         public static DataTable dt_recordvote(string themeid)
         {
            return OADAL.dt_recordvote(themeid);
         }
        /// <summary>
        /// 分类求出名票数的和
        /// </summary>
        /// <returns></returns>
         public static DataTable dt_record()
         {
             return OADAL.dt_record();
         }

         public static DataTable dt_mettype()
         {
             return OADAL.dt_mettype();
         }
         /// <summary>
         /// 返回所有会议地点
         /// </summary>
         /// <returns></returns>
         public static DataTable dt_metdress()
         {
             return OADAL.dt_metdress();
         }
         /// <summary>
         /// 返回所有会议召开部门
         /// </summary>
         /// <returns></returns>
         public static DataTable dt_metdepart()
         {
             return OADAL.dt_metdepart();
         }
         /// <summary>
         /// user 当前操作的用户
         /// mettingtitle会议名称
         /// mettingadress会议的地点
         /// mettingdepartment会议的部门
         /// operperson主持人
         /// starttime会议的开始时间
         /// endtime会议的结束时间
         /// range 会议的范围
         /// mettinaddpersons会议的参加人员
         /// file会议的资料
         /// 是否通知会议管理员
         /// </summary>
         /// <param name="user"></param>
         /// <param name="mettingtitle"></param>
         /// <param name="mettingtype"></param>
         /// <param name="mettingadress"></param>
         /// <param name="mettingdepartment"></param>
         /// <param name="operperson"></param>
         /// <param name="starttime"></param>
         /// <param name="endtime"></param>
         /// <param name="range"></param>
         /// <param name="mettingaddperson"></param>
         /// <param name="mettingdescription"></param>
         /// <param name="file"></param>
         /// <param name="TFadmin"></param>
         public static void Insert_metting(string user, string mettingtitle, string mettingtype, string mettingadress, string mettingdepartment, string operperson, string starttime, string endtime, string range, string mettingaddperson, string mettingdescription, string file, string TFadmin)
         {
             OADAL.Insert_metting(user, mettingtitle, mettingtype, mettingadress, mettingdepartment, operperson, starttime, endtime, range, mettingaddperson, mettingdescription, file, TFadmin);
         }

         /// <summary>
         /// 返回metting的所有会议
         /// </summary>
         /// <param name="commandtext"></param>
         /// <param name="commandtype"></param>
         /// <param name="param"></param>
         /// <returns></returns>
         public static DataTable dt_all_metting(string user)
         {
             return OADAL.dt_all_metting(user);
         }
         /// <summary>
         /// 返回不同意类型的会议
         /// state是会议类型即是dropdownlist的selectvelue
         /// </summary>
         /// <param name="state"></param>
         /// <returns></returns>
         public static DataTable dt_all_metting1(string user,string state)
         {
             return OADAL.dt_all_metting1(user,state);
          }
        /// <summary>
        /// 按会议的id号进行删除操作
        /// </summary>
        /// <param name="id"></param>
         public static void Delete_metting(string id)
         {
             OADAL.Delete_metting(id);
         }
        /// <summary>
        /// 将指定id的会议进行送审
        /// </summary>
        /// <param name="id"></param>
         public static void SongShen(string id)
         {
             OADAL.SongShen(id);
         }
        /// <summary>
        /// 返回送审的状态是否已经送审或是什么别的情况我们都允许其送审
        /// 返回no说明用户可以将此会议进行送审
        /// 返回yes说明用户不可以将此会议进行送审
        /// </summary>
        /// <param name="id"></param>
        /// <returns></returns>
         public static string SongSheng_Check(string id)
         {
             return OADAL.SongSheng_Check(id);
         
         }

         /// <summary>
        /// 显示所有送审的会议
        /// </summary>
        /// <returns></returns>
         public static DataTable dt_all_metting_admin()
         {
             return OADAL.dt_all_metting_admin();
         }
         /// <summary>
         ///  user为管理员有名称就是当前登录的用户
         /// 允许会议开id为批准的会议Id号
         /// state为用户是批准还是退回
         /// 3为批准
         /// 4退回
         /// 
         /// 并记录当前管理员批准的记录
         /// </summary>
         /// <param name="user"></param>
         /// <param name="id"></param>
         /// <param name="state"></param>
         public static void Metting_All(string user, string id,string state)
         {
             OADAL.Metting_All(user, id,state);
         }

        /// <summary>
        /// 返回当前管理员操作的记录
        /// user为当前管理员登录的用户名
        /// </summary>
        /// <param name="user"></param>
        /// <returns></returns>
         public static DataTable Metting_Owner_All(string user)
         {
             return OADAL.Metting_Owner_All(user);
         }
         /// <summary>
        /// 这里是返加管理员的操作记录
        /// user为管理员名字母
        /// state为要反加的两种状态
        /// state为3的时候 是返回管理员批准的会议
        /// state为4的时候 是返回管事员退回的会议
        /// </summary>
        /// <param name="user"></param>
        /// <param name="state"></param>
        /// <returns></returns>
         public static DataTable dt_Mettin_Record(string user, string state)
         {
             return OADAL.dt_Mettin_Record(user,state);
         }
                /// <summary>
        /// 返回当前用户的的所有会议操作
        /// user 为当的用户
        /// </summary>h
        /// <param name="user"></param>
        /// <returns></returns>
        public static DataTable dt_Mettin_All_Record(string user)
        {
             return OADAL.dt_Mettin_All_Record(user);
        }
         /// 返回所有要参加的会议
         /// </summary>
         /// <returns></returns>
        public static DataTable dt_Metting_GO()
        {
            return OADAL.dt_Metting_GO();
        }
        /// <summary>
        /// 修改用户的密码
        /// user为用户名
        /// oldpwd为用户原来的密码
        /// 修改成功后返回"修改成功"
        /// 不成功装饰返回"您是非法用户!"
        /// </summary>
        /// <param name="user"></param>
        public static string User_Pwd(string user, string pwd,string oldpwd)
        {
            if (OADAL.GetOaData(user, oldpwd)[0] != "0")
            {
                OADAL.User_Pwd(user, pwd);   //密码修改
                return "修改成功";
            }
            else
            {
                return "您是非法的用户!";
            }

          
        }

         /// <summary>
        /// 返回用户的个人资料
        /// </summary>
        /// <param name="user"></param>
        /// <returns></returns>
        public static string[] dt_user_zl(string user)
        {
            string[] zl = new string[7];
           DataTable dt = OADAL.dt_user_zl(user);
          zl[0]= dt.Rows[0][1].ToString();   //用户名
          zl[1] = dt.Rows[0][2].ToString();   //性别
          zl[2] = dt.Rows[0][3].ToString();    //电话
          zl[3] = dt.Rows[0][4].ToString();    //民族
          zl[4] = dt.Rows[0][5].ToString();   //photo
          zl[5] = dt.Rows[0][6].ToString();   //memeo
          return zl;
        }

                /// <summary>
        /// 修改用户的个人资料
        /// </summary>
        /// <param name="user"></param>
        /// <param name="sex"></param>
        /// <param name="phone"></param>
        /// <param name="minzu"></param>
        /// <param name="photo"></param>
        /// <param name="memeo"></param>
        public static void Insert_user_zl(string user, string sex, string phone, string minzu, string photo, string memeo)
        {
            OADAL.Insert_user_zl(user,sex,phone,minzu,photo,memeo);
        
        }

                /// <summary>
        /// user为当前的用户名
        /// title记事本的题目
        /// contetn记事本的内容
        /// datetime记事本的时间
        /// </summary>
        /// <param name="user"></param>
        /// <param name="title"></param>
        /// <param name="contetn"></param>
        /// <param name="datetime"></param>
        public static void Insert_Note(string user, string title, string contetn, string datetime)
        {
            OADAL.Insert_Note(user,title,contetn,datetime);
        
        
        
        
        }        
 
         /// <summary>
        /// 记事的id号
        /// </summary>
        /// <param name="id"></param>
        /// <returns></returns>
        public static DataTable Note_Record(string id)
        {
            return OADAL.Note_Record(id);
        }

         /// <summary>
         /// title为记事本的题目
         /// content为记事本的内容
         /// time为记事本的时间
         /// id为记事的标识(唯一)
         /// </summary>
         /// <param name="title"></param>
         /// <param name="content"></param>
         /// <param name="time"></param>
         /// <param name="id"></param>
        public static void Update_Note(string title, string content, string time, string id)
        {
            OADAL.Update_Note(title, content, time, id);
        }  
     }
}

//还有层是实体类由于时间和空间的原因,没上上传