inc_logon.aspx

Bug管理系统

<script language="C#" runat="server">

///////////////////////////////////////////////////////////////////////
void create_session(int userid, string username, string NTLM)
{

	// Generate a random session id
	// Don't use a regularly incrementing identity
	// column because that can be gussed.
	string guid = Guid.NewGuid().ToString();

	Util.write_to_log("guid=" + guid);

	sql = @"insert into sessions (se_id, se_user) values('$gu', $us)";
	sql = sql.Replace("$gu", guid);
	sql = sql.Replace("$us", Convert.ToString(userid));

	dbutil.execute_nonquery(sql);

	string sAppPath = Request.Url.AbsolutePath;
	sAppPath = sAppPath.Substring(0, sAppPath.LastIndexOf('/'));

	Response.Cookies["se_id"].Value = guid;
	Response.Cookies["se_id"].Path = sAppPath;
	Response.Cookies["user"]["name"] = username; 
	Response.Cookies["user"]["NTLM"] = NTLM;
	Response.Cookies["user"].Path = sAppPath;
	DateTime dt = DateTime.Now;
	TimeSpan ts = new TimeSpan(365,0,0,0);
	Response.Cookies["user"].Expires = dt.Add(ts);
}

</script>