user_login.aspx.cs

b to b 模式 电子商务系统

using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;

using System.Data.SqlClient;
using System.Configuration;

namespace B2Bsite
{
	/// <summary>
	/// 用户登陆
	/// </summary>
	public class User_Login : System.Web.UI.Page
	{
        protected System.Web.UI.WebControls.TextBox TextBox1;
        protected System.Web.UI.WebControls.TextBox TextBox2;
        protected System.Web.UI.HtmlControls.HtmlForm Form1;
        protected System.Web.UI.WebControls.ImageButton ImageButton1;
    
		private void Page_Load(object sender, System.EventArgs e)
		{
		}


        public static string InputText( string inputString )//过滤输入字符串
        {
            if ((inputString != null) && (inputString != String.Empty ))
            {
                inputString = inputString.Trim();
                inputString = inputString.Replace("'","&quot;");
                inputString = inputString.Replace("<","&lt;");
                inputString = inputString.Replace(">","&gt;");
                inputString = inputString.Replace(" ","&nbsp;");
                return inputString.ToString();
            }
            return "";
        }
		#region Web 窗体设计器生成的代码
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: 该调用是 ASP.NET Web 窗体设计器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 设计器支持所需的方法 - 不要使用代码编辑器修改
		/// 此方法的内容。
		/// </summary>
		private void InitializeComponent()
		{    
            this.ImageButton1.Click += new System.Web.UI.ImageClickEventHandler(this.ImageButton1_Click);
            this.Load += new System.EventHandler(this.Page_Load);

        }
		#endregion


        private void ImageButton1_Click(object sender, System.Web.UI.ImageClickEventArgs e)
        {
            string username;
            string password;

            //普通加密
            //获得要加密的字段，并转化为Byte[]数组
            /*byte[] data=System.Text .Encoding .Unicode .GetBytes (TextBox2.Text .ToCharArray ());
            //建立加密服务
            System.Security .Cryptography .MD5 md5=new System.Security .Cryptography.MD5CryptoServiceProvider ();
            //加密Byte[]数组
            byte[] result=md5.ComputeHash (data);
            //将加密后的数组转化为字段
            string sResult=System.Text.Encoding .Unicode .GetString (result);*/


            //作为密码方式加密
            string EnPswdStr = System.Web.Security.FormsAuthentication.HashPasswordForStoringInConfigFile( TextBox2.Text.ToString(),"MD5" );
            username=InputText(TextBox1.Text) ;
            password=EnPswdStr;

            if(username.Equals ("")||password.Equals(""))
            {
                Response.Write ("<script language='JavaScript'>");
                Response.Write ("alert('会员名和密码不能为空！')");
                Response.Write ("</script>");;
                return;
            }

            SqlConnection connection=new SqlConnection(ConfigurationSettings.AppSettings["ConnectionString"]);
            String sql="SELECT * FROM Users where UserName='"+username+"' and PassWord='"+password+"'";
            DBConnection conn=new DBConnection();
            SqlDataReader dr=conn.ExecuteReader(sql);

            if(dr.Read())
            {
                Session["username"]=username;

                if( Request.QueryString["msg"] == null )
                {
                    Response.Redirect("shop_manage.aspx");
                }
                else
                {
                    Response.Redirect( Server.UrlDecode( Request.QueryString["msg"].ToString() ) );
                }

                return ;
            }
            else 
            {
                Response.Write ("<script language='JavaScript'>");
                Response.Write ("alert('您输入的会员名或密码有错！请重新输入！')");
                Response.Write ("</script>");
                return ;
            }
        }
	}
}