title.aspx.cs

电子合同管理系统C#

using System;
using System.Configuration;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Data.SqlClient;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;

namespace JWXT.common
{
	/// <summary>
	/// * @summary  该函数验证用户登录，具体信息请参看注释
	/// * @Author Hermit Lau
	/// * @Last Modification 2003-07-29
	/// </summary>
	public class title : System.Web.UI.Page
	{
		protected System.Web.UI.WebControls.RequiredFieldValidator RequiredFieldValidator1;
		protected System.Web.UI.WebControls.ImageButton ImageButton1;
		protected System.Web.UI.WebControls.ValidationSummary ValidationSummary1;
		protected System.Web.UI.WebControls.RequiredFieldValidator RequiredFieldValidator2;
		public SqlConnection Conn;
		protected System.Web.UI.WebControls.TextBox UserID;
		protected System.Web.UI.WebControls.TextBox UserPwd;
		string ConnStr=System.Configuration.ConfigurationSettings.AppSettings["data"].ToString().Trim();

		private void Page_Load(object sender, System.EventArgs e)
		{
			// 在此处放置用户代码以初始化页面
			Conn=new SqlConnection(ConnStr);
		}

		#region Web Form Designer generated code
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN：该调用是 ASP.NET Web 窗体设计器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 设计器支持所需的方法 - 不要使用代码编辑器修改
		/// 此方法的内容。
		/// </summary>
		private void InitializeComponent()
		{    
			this.ImageButton1.Click += new System.Web.UI.ImageClickEventHandler(this.ImageButton1_Click);
			this.Load += new System.EventHandler(this.Page_Load);

		}
		#endregion


		private void ImageButton1_Click(object sender, System.Web.UI.ImageClickEventArgs e)
		{//该函数验证用户的登录信息
		 //若出错给出出错提示，并返回登录页面
		 //若通过验证，调用存储过程，生成导航菜单，并将UserID写入Session
		 //验证分两步：首先验证用户名是否存在，是否重复，其次验证用户名和密码是否匹配

			/*******************开始用户名验证**************************************/
			string SelectStr_ID="select * from UserInfo where UserID='"+UserID.Text.ToString()+"'";
			DataSet DS_ThisUser_ID=new DataSet();
			try
			{
				SqlDataAdapter DA_ThisUser_ID=new SqlDataAdapter(SelectStr_ID,Conn);
				DA_ThisUser_ID.Fill(DS_ThisUser_ID,"AllUsers_ID");
			}
			catch(System.Exception x)
			{//异常处理
				if(x.Message.ToString().Length!=0)
				{
					Response.Write("<script language=javascript>");
					Response.Write("window.alert('验证用户名时发生异常，请检查输入数据是否合理！');");
					Response.Write("window.location='Index.htm';");
					Response.Write("</script>");
				}
				return;
			}
			if(DS_ThisUser_ID.Tables[0].Rows.Count==0)//说明该用户名不存在
			{
				Response.Write("<script language=javascript>");
				Response.Write("window.alert('您输入的用户名不存在，请返回检查！');");
				Response.Write("window.location='Index.htm';");
				Response.Write("</script>");
			}
			if(DS_ThisUser_ID.Tables[0].Rows.Count>1)//说明该用户名在库中有2条以上的重复记录
			{
				Response.Write("<script language=javascript>");
				Response.Write("window.alert('您输入的用户名重复存在，系统无法判断身份，请与系统管理员联系！');");
				Response.Write("window.location='Index.htm';");
				Response.Write("</script>");
			}
			if(DS_ThisUser_ID.Tables[0].Rows.Count==1)//说明该用名户存在且唯一，则进一步验证密码
			/*******************结束用户名验证**************************************/
			/*++++++++++++++++++开始密码验证+++++++++++++++++++++++++++++++++++++++*/
			{//经过上一步验证，该步验证不可能出现重复记录，故可不加判断
				string SelectStr="select * from UserInfo where UserID='"+UserID.Text.ToString()+"' and UserPwd='"+UserPwd.Text.ToString()+"'";
				DataSet DS_ThisUser=new DataSet();
				try
				{
					SqlDataAdapter DA_ThisUser=new SqlDataAdapter(SelectStr,Conn);
					DA_ThisUser.Fill(DS_ThisUser,"AllUsers");
				}
				catch(System.Exception x) 
				{//异常处理
					if(x.Message.ToString().Length!=0)
					{
						Response.Write("<script language=javascript>");
						Response.Write("window.alert('验证密码时发生异常，请检查输入数据是否合理！');");
						Response.Write("window.location='Index.htm';");
						Response.Write("</script>");
					}
					return;
				}
				if(DS_ThisUser.Tables[0].Rows.Count==0)//说明用户名和密码不匹配
				{
					Response.Write("<script language=javascript>");
					Response.Write("window.alert('您输入的密码不正确，请返回检查！');");
					Response.Write("window.location='Index.htm';");
					Response.Write("</script>");
				}
				if(DS_ThisUser.Tables[0].Rows.Count==1)
				//说明用户名和密码匹配，通过验证
				//调用存储过程，取得该用户的权限字符串，并写到Session里
				//写入Session的变量：UserID     供以后各个模块调用
				//                   UserPower  供navigation.aspx页面调用以生成导航菜单
				{
					Session["UserID"]=UserID.Text.ToString();
					SqlCommand cm=new SqlCommand("ThisUserPower",Conn);
					cm.CommandType=CommandType.StoredProcedure;
					cm.Parameters.Add("@UserID",SqlDbType.VarChar,20);
					cm.Parameters["@UserID"].Value=UserID.Text.ToString();
					cm.Parameters.Add("@UserPower",SqlDbType.VarChar,3000);
					cm.Parameters["@UserPower"].Direction=ParameterDirection.Output;
					cm.Connection.Open();
					SqlDataReader dr=cm.ExecuteReader();
					Session["UserPower"]=cm.Parameters["@UserPower"].Value;
					Response.Redirect("Index.htm");
				}   
			}
			/*++++++++++++++++++结束密码验证+++++++++++++++++++++++++++++++++++++++*/
		}
	}
}