using System; using System.Configuration; using System.Data; using System.Data.SqlClient; using System.Text.RegularExpressions; using Castle.ActiveRecord; using ECOEarth.Web.Domain; namespace ECOEarth.Web { public partial class SalesInvoice : System.Web.UI.Page { public virtual Order SelectedOrder { get { return selectedOrder; } set { selectedOrder = value; } } private Order selectedOrder; protected void Page_Load(object sender, EventArgs e) { if (Request.QueryString["orderId"] == null || !Regex.IsMatch(Request.QueryString["orderId"], @"^\d+$")) return; int orderId = Convert.ToInt32(Request.QueryString["orderId"]); string password = Request.QueryString["password"]; if (!password.Equals(ConfigurationManager.AppSettings["AdminPassword"])) { return; } SelectedOrder = ActiveRecordBase.Find(orderId); OrderItemRepeater.DataSource = SelectedOrder.OrderBasket.OrderItems; OrderItemRepeater.DataBind(); } } }