ASP.NET

<anonymousIdentification enabled="true"/>
<profile enabled="true">
  <properties>
    <add name="FName" type="String" allowAnonymous="true"/>
  </properties>
</profile>
<authentication mode="Windows" />

Profile.FName = TextBox1.Text;
Response.Write("Your name is: " + Profile.FName);

public virtual ActionResult ListAjax([DataSourceRequest] DataSourceRequest request)
{
    var d = myWebService.GetD(s, c, f);
    var dList = d.Select(x => x.DId).ToList();
    DataSourceResult result = d.ToDataSourceResult(request);
    return Json(result);
}

<div id="rowsBg" class="rowsBgSearchStaff" runat="server">
    <div id="trashHolder" class="buttonHolder">
        <asp:ImageButton ID="btnTrash" CssClass="btnTrashSearch" ToolTip="حذف" 
            ImageUrl="~/img/btnsearchtrash.png" runat="server" onclick="btnTrash_Click" />
    </div>
    <div id="separator1" class="separatorSearchStaff">
    </div>
    <div id="editHolder" class="buttonHolder">
        <asp:ImageButton ID="btnEdit" CssClass="btnEditSearch" ToolTip="ویرایش" 
            ImageUrl="~/img/btnsearchedit.png" runat="server" 
            onclick="btnEdit_Click" />
    </div>    
    <div id="separator2" class="separatorSearchStaff">
    </div>
    <div id="infoStaffHolder" class="staffinfoHolder">
        <asp:Label ID="lblStaffInfo" runat="server">Name, Family, Code</asp:Label>
    </div>                        	
</div>

protected void btnTrash_Click(object sender, ImageClickEventArgs e)
{
    dbm.Execute(String.Format("delete from Staff where Code='{0}'", StaffCode));
    dbm.Execute(String.Format("delete from Contract where StaffCode='{0}'", StaffCode));
    dbm.Execute(String.Format("delete from WardStaffs where StaffCode ='{0}'", StaffCode));
    rowsBg.Visible = false;
}
protected void btnEdit_Click(object sender, ImageClickEventArgs e)
{
    Response.Redirect(String.Format("EditStaff.aspx?sid={0}", StaffCode));
}

TIP: dbm is an instance of my databasemanager class

protected void cmbBxWard_SelectedIndexChanged(object sender, RadComboBoxSelectedIndexChangedEventArgs e)
{
    if (dbm.Read(String.Format("select * From Staff where Staff.Code in (select StaffCode from WardStaffs where WardCode={0})", cmbBxWard.Items[cmbBxWard.SelectedIndex].Value)))
    {
        foreach (DataRow dr in dbm.DT.Rows)
        {
            Control cnt = Page.LoadControl("StaffItem.ascx");
            StaffItem staff = (StaffItem)cnt;
            staff.StaffCode = dr["Code"].ToString();
            itemHolder.Controls.Add(staff);
        }
    }
}

protected void btnUpdate_Click(object sender, EventArgs e)
        {
            #region  @
            try
            {
                string myid = string.Empty;
                for (int i = 0; i < gv_enfant.Rows.Count; i++)
                {
                    var chbox = gv_enfant.Rows[i].Cells[0].FindControl("CheckBoxenfant") as CheckBox;
                    var codeenfant = gv_enfant.Rows[i].Cells[0].FindControl("codeenfant") as HiddenField;
                    if (chbox != null && codeenfant != null)
                    {
                        if (chbox.Checked)
                        {
                            myid = codeenfant.Value;
                        }
                    }
                }
                Response.Write("myid = " + myid);
                c.cmd = c.cn.CreateCommand();
                c.cmd.CommandText = "update Enfants set prenom =@prenom,  DateNaissance=@dateNaissance, Scolarise=@scolarise, Activite=@activite where codeEnfants=@codeEnfants";
                if (c.cn.State == ConnectionState.Closed)
                {
                    c.cn.Open();
                }
                c.cmd.Parameters.Add("@prenom", SqlDbType.VarChar);
                c.cmd.Parameters.Add("@dateNaissance", SqlDbType.Date);
                c.cmd.Parameters.Add("@scolarise", SqlDbType.VarChar);
                c.cmd.Parameters.Add("@activite", SqlDbType.VarChar);
                c.cmd.Parameters.Add("@codeEnfants", SqlDbType.Int);

                c.cmd.Parameters["@prenom"].Value = TextBox_NPmodif.Text;
                c.cmd.Parameters["@dateNaissance"].Value = TextBox_DNmodif.Text;
                c.cmd.Parameters["@scolarise"].Value = TextBox_Scolarisemodif.Text;
                c.cmd.Parameters["@activite"].Value = TextBox_Activitemodif.Text;
                c.cmd.Parameters["@codeEnfants"].Value = myid;
                c.cmd.ExecuteNonQuery();
                gv_enfant.DataBind();

                //success!
                Response.Write("<script>alert('Opération reussie')</script>");
               
            }
            catch (SqlException sqlEx)
            {
                //fail!
                //what is the point of cacthing if you do use the exception?
                Response.Write("error" + sqlEx.Message);
                Response.Write("<script>alert ('Erreur lors de la modif!')</script>");
            }
            finally
            {
                if (c.cn.State == ConnectionState.Open)
                {
                    c.cn.Close();
                }
            }
            #endregion
}

public class MultiController : ApiController
    {
        if (User.IsInRole("admin"))
    {

        [ActionName(BwicController)]
    }
    else (User.IsInRole("user"))
    {
        [ActionName(IntexController)]
    }

    }

public class PrincipalPro : IProvidePrincipal
    {

        private const string Username = "###";
        private const string Password = "###";

        public IPrincipal CreatePrincipal(string username, string password)
        {
            if (username != Username || password != Password)
            {
                return null;
            }

            var identity = new GenericIdentity(Username);

            IPrincipal principal = new GenericPrincipal(identity, new[] { "admin" });
            return principal;
        } 
    
    }