user_getpassword.aspx.cs

b to b 模式 电子商务系统

using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;

using System.Data.SqlClient;
using System.Configuration;

namespace B2Bsite
{
	/// <summary>
	/// 验证密码问题答案
	/// </summary>
	public class User_GetPassWord : System.Web.UI.Page
	{
        protected System.Web.UI.WebControls.Label Label4;
        protected System.Web.UI.WebControls.Label Label3;
        protected System.Web.UI.WebControls.TextBox TextBox3;
        protected System.Web.UI.WebControls.Label Label1;
        protected System.Web.UI.WebControls.TextBox TextBox1;
        protected System.Web.UI.WebControls.Label Label2;
        protected System.Web.UI.WebControls.TextBox TextBox2;
        protected System.Web.UI.WebControls.Button Button1;
        protected System.Web.UI.WebControls.Button Button2;

        public string answer;
        public string question;
        public string password;
        public string username;
    
		private void Page_Load(object sender, System.EventArgs e)
		{
		}

        public static string InputText( string inputString )//过滤输入字符串
        {
            if ((inputString != null) && (inputString != String.Empty ))
            {
                inputString = inputString.Trim();
                inputString = inputString.Replace("'","&quot;");
                inputString = inputString.Replace("<","&lt;");
                inputString = inputString.Replace(">","&gt;");
                inputString = inputString.Replace(" ","&nbsp;");
                return inputString.ToString();
            }
            return "";
        }

		#region Web 窗体设计器生成的代码
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: 该调用是 ASP.NET Web 窗体设计器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 设计器支持所需的方法 - 不要使用代码编辑器修改
		/// 此方法的内容。
		/// </summary>
		private void InitializeComponent()
		{  
            this.Button1.Click += new System.EventHandler(this.Button1_Click);
            this.Button2.Click += new System.EventHandler(this.Button2_Click);
            this.Load += new System.EventHandler(this.Page_Load);

        }
		#endregion

        private void Button2_Click(object sender, System.EventArgs e)
        {
            TextBox1.Text ="";
            TextBox2.Text="";
        }

        private void Button1_Click(object sender, System.EventArgs e)
        {
            question    = InputText(TextBox1.Text);
            answer      = InputText(TextBox2.Text);
            username    = InputText(TextBox3.Text);

            SqlConnection connection=new SqlConnection (ConfigurationSettings.AppSettings["ConnectionString"]);
            String sql="SELECT * FROM Users where Question='"+question+"' and Answer='"+answer+"' and UserName='"+username+"'";
            /*SqlCommand command=new SqlCommand(sql,connection);//构建执行数据库命令
            connection.Open();*/
            //保存从数据库里面返回的一条记录
            DBConnection conn=new DBConnection();
            SqlDataReader dr=conn.ExecuteReader(sql);

            if(dr.Read())
            {
                Response.Redirect("User_NewPassWord.aspx?username="+Server.UrlEncode(username));
                return;
            }
            else
            {
                Response.Write ("<script language='JavaScript'>");
                Response.Write ("alert('您输入的资料不确定！请重新输入！')");
                Response.Write ("</script>");
                return;
            }
        }
	}
}