Protected Sub saveContact_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles saveContact.Click
            'controlla che sia un postback,quindi preleva l'id del paziente e salva lo stato della chiamata
            'all'interno del database.
            Dim objUserInfo As UserInfo = UserController.GetCurrentUserInfo
            Dim user_id As SqlDataReader
            Dim cvDB As SqlConnection
            Dim cmdUpdate, cmdRead As SqlCommand
            Dim query As String
            Dim id_patient As Integer
            Dim id_doctor As String
            Dim subject As String
            Dim body As String

            If objUserInfo.UserID > -1 Then
                cvDB = New SqlConnection("Data Source=SERVER;Initial Catalog=DBNAME;User ID=user;Password=")
                cvDB.Open()
                id_patient = hdIdPatient.Value
                query = "Select dbo.aspnet_Users.UserId from dbo.aspnet_Users where dbo.aspnet_Users.UserName='" + DotNetNuke.Entities.Users.UserController.GetCurrentUserInfo.Username + "'"
                cmdRead = New SqlCommand(query, cvDB)
                user_id = cmdRead.ExecuteReader()
                id_doctor = 0
                While user_id.Read()
                    id_doctor = user_id(0).ToString()
                End While
                user_id.Close()
                cmdUpdate = New SqlCommand("Update dbo.Patients set [id_doctor_call]='" + id_doctor + "',call_status=1,call_date=GETDATE(),call_note='" + Web.HttpUtility.HtmlEncode(Trim(txtContactNote.Text)) + "' where [id_patient]='" + id_patient.ToString + "'", cvDB)
                cmdUpdate.ExecuteNonQuery()
                cvDB.Close()
                'quindi fa il refresh della pagina
                'subject = "Scheda del Paziente " + GridView1.SelectedRow.Cells(2).Text + " " + GridView1.SelectedRow.Cells(3).Text '"Il paziente " + GridView1.SelectedRow.Cells(2).Text + " " + GridView1.SelectedRow.Cells(3).Text + " è stato chiamato"
                body = "Il medico " + DotNetNuke.Entities.Users.UserController.GetCurrentUserInfo.FirstName + " " + DotNetNuke.Entities.Users.UserController.GetCurrentUserInfo.LastName + " ha provveduto a contattare il paziente, fissando un appuntamento." + Chr(10) + Chr(10) + "Note della chiamata: " + Web.HttpUtility.HtmlEncode(Trim(txtContactNote.Text)) & Chr(10) & Chr(10) & "Clicca qui per visionarlo: http://www.progettomiracle.com/ElencoPazienti/tabid/71/Default.aspx" + Chr(10) + Chr(13) + "Cd Pharma Group s.r.l."
                send_mail(lblTitle.Text + " - Avviso Chiamata", body) 'GridView1.SelectedRow.Cells(2).Text, GridView1.SelectedRow.Cells(3).Text)
                'Response.Redirect("/LinkClick.aspx?link=71")

                 End If
        End Sub