login.aspx.cs

功能介绍： 支持站长管理（删除、修改、回复） 支持邮件发送 支持数据库加密码 留言含邮箱、主页、QQ、MSN、来自、邮件提示、IP获取、回复等功能 初始用户:admin 密码:admin

using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Data.SqlClient ;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;
using System.Web.Security;

namespace Gbook
{
	/// <summary>
	/// RandIMG 的摘要说明。
	/// </summary>
	public class Login : System.Web.UI.Page
	{
		protected System.Web.UI.WebControls.TextBox GM_NAME;
		protected System.Web.UI.WebControls.RequiredFieldValidator RF_NAME;
		protected System.Web.UI.WebControls.Button btnSubmit;
		protected System.Web.UI.WebControls.TextBox GM_PASSWORD;
		protected System.Web.UI.WebControls.RequiredFieldValidator RF_PASSWORD;
		protected System.Web.UI.WebControls.Button btnReset;
		protected System.Web.UI.WebControls.Label lblMessage;
		private Gbook.Conn myConn	= new Gbook.Conn();			// [打开数据库]
	
		private void Page_Load(object sender, System.EventArgs e)
		{
		}

		/// <summary>
		/// 获取数据库连接
		/// </summary>
		private string strConn
		{
			get	{	return myConn.ConnString();}
		}

		/// <summary>
		/// 获取论坛MID号
		/// </summary>
		private string strMD5Pwd
		{
			get	{ return FormsAuthentication.HashPasswordForStoringInConfigFile(GM_PASSWORD.Text,"md5");}
		}

		#region Web 窗体设计器生成的代码
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: 该调用是 ASP.NET Web 窗体设计器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 设计器支持所需的方法 - 不要使用代码编辑器修改
		/// 此方法的内容。
		/// </summary>
		private void InitializeComponent()
		{    
			this.btnSubmit.Click += new System.EventHandler(this.btnSubmit_Click);
			this.Load += new System.EventHandler(this.Page_Load);

		}
		#endregion

		private void btnSubmit_Click(object sender, System.EventArgs e)
		{
		
			string strName,strPwd = null;
			strName	= GM_NAME.Text;
			strPwd	= GM_PASSWORD.Text;
			if (strName.Trim() == "" || strPwd.Trim() == "")
			{	
				Response.Redirect("Login.asp");
			}
			else
			{
				// -----------	数据库连接	-----------
				SqlConnection myConnection	= new SqlConnection(strConn);
				myConnection.Open();

				// -----------	查询数据表的记录总数	-----------
				string strSQLCmd1	= "Select Top 1 * From GuestBook_Admin Where AD_USERNAME='" + strName + "'";
				SqlCommand SQLCmd1	= new SqlCommand(strSQLCmd1, myConnection);
				SqlDataReader dr1 = SQLCmd1.ExecuteReader();
				try 
				{
					dr1.Read();
					if (dr1.HasRows)
					{
						// -----------	获取值	-----------
						string	myUserName,myPwdMd5 = null;
						myUserName	= dr1["AD_USERNAME"].ToString();
						myPwdMd5	= dr1["AD_PASSWORD"].ToString();

						if (strMD5Pwd != myPwdMd5 )
						{
							lblMessage.Visible  = true;
							lblMessage.Text		= "对不起，密码不正确，请重新登录！<br>";
						}
						else
						{
						
							// ----------	更新/创建 MyCookies ----------
							DateTime now	= DateTime.Now;
							if(Request.Cookies["MyCookies"] != null) 
							{
								HttpCookie	MyCo = Request.Cookies["MyCookies"];
								MyCo.Values.Set("myUserName",	strName);
								MyCo.Values.Set("myPwd"		,	strPwd);
								MyCo.Values.Set("myPwdMd5"	,	strMD5Pwd);
								MyCo.Expires	 = now.AddDays(7);
								Response.Cookies.Set(MyCo);
							}
							else
							{
								HttpCookie	MyCo = new HttpCookie("MyCookies");
								MyCo.Values.Set("myUserName",	strName);
								MyCo.Values.Set("myPwd"		,	strPwd);
								MyCo.Values.Set("myPwdMd5"	,	strMD5Pwd);
								MyCo.Expires	= now.AddDays(7);
								Response.Cookies.Add(MyCo);
							}
							dr1.Close();
							SQLCmd1.Dispose();
							myConnection.Close();
							Response.Redirect("Admin.aspx");		// 跳转到管理页！
						}
					}
					else
					{
						lblMessage.Text		= "对不起，登录名为 [ " + strName + " ] 的用户名不存在！<br>";
					}
				}
				catch (SqlException ex)
				{
					lblMessage.Text		= ex.Message;
				}
				finally
				{
					dr1.Close();
					SQLCmd1.Dispose();
					myConnection.Close();
				}
			}
		}
	}
}