admin_login.aspx.cs

网上自动答疑系统(C#)

using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.Security;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;

namespace dayi
{
	/// <summary>
	/// admin_login 的摘要说明。
	/// </summary>
	public class admin_login : System.Web.UI.Page
	{
		protected System.Web.UI.WebControls.Button btnSubmit;
		protected System.Web.UI.WebControls.Panel PanLogin;
		protected System.Web.UI.WebControls.TextBox txtAdminName;
		protected System.Web.UI.WebControls.TextBox txtAdminPwd;
		protected System.Web.UI.WebControls.Label lblLoginMsg;
		protected System.Web.UI.WebControls.Label lblMsg;
	
		dayi.controlDatabase cd=new controlDatabase();

		private void Page_Load(object sender, System.EventArgs e)
		{
			if(!this.IsPostBack)
			{
				if(Session["userName"].ToString()!="" && Session["userType"].ToString()=="admin")
				{
					this.PanLogin.Visible=false;
					this.lblLoginMsg.Text="<a href=admin_center.htm>管理中心</a> <a href=exitLogin.aspx>退出登录</a>";
				}
				else
				{
					this.PanLogin.Visible=true;
					this.lblLoginMsg.Text="";
				}
			}
		}

		#region Web 窗体设计器生成的代码
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: 该调用是 ASP.NET Web 窗体设计器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 设计器支持所需的方法 - 不要使用代码编辑器修改
		/// 此方法的内容。
		/// </summary>
		private void InitializeComponent()
		{    
			this.btnSubmit.Click += new System.EventHandler(this.btnSubmit_Click);
			this.Load += new System.EventHandler(this.Page_Load);

		}
		#endregion

		private void btnSubmit_Click(object sender, System.EventArgs e)
		{
			//管理员登录
			try
			{
				string adminName=this.txtAdminName.Text.Trim();
				string adminPwd=this.txtAdminPwd.Text.Trim();
				adminPwd=FormsAuthentication.HashPasswordForStoringInConfigFile(adminPwd,"sha1");//加密
				string sql="select * from [admin] where adminName='"+adminName+"' and adminPwd='"+adminPwd+"'";
				if(cd.catchRecord(sql))
				{
					Session["userName"]=adminName;
					Session["userType"]="admin";
					Response.Redirect("admin_center.htm");
				}
				else
				{
					this.lblMsg.Text="<b>不能登录</b><br>可能是用户名或密码出错";
					this.txtAdminName.Text="";
				}
			}
			catch(Exception)
			{
				//Response.Redirect("err.aspx?err=出现错误，可能执行了非法操作！<br>请联系技术人员解决");
			}
		}
	}
}