useraccess.cs

ASP.NET 2.0动态网站设计实例源代码,本书介绍了ASP.NET2.0的基础知识

///////////////////////////////////////////////////////////
//  UserAccess.cs
//  Implementation of the Class UserAccess
//  Generated by Enterprise Architect
//  Created on:      07-五月-2006 14:01:00
///////////////////////////////////////////////////////////




using BookShop.Entity;
using System.Data;
using System.Data.SqlClient;
using System;
namespace BookShop.DataAccess {
	/// <summary>
	/// 与后台用户有关的数据操作
	/// </summary>
	public class UserAccess {

		public UserAccess(){

		}

		~UserAccess(){

		}

		public virtual void Dispose(){

		}

		/// <summary>
		/// 添加用户
		/// </summary>
		/// <param name="user"></param>
		public bool AddUser(UserEntity user){
   SqlParameter[] parms = new SqlParameter[]{
    new SqlParameter("@Name",SqlDbType.NVarChar,50),
    new SqlParameter("@Password",SqlDbType.NVarChar,32),
    new SqlParameter("@RoleID",SqlDbType.Int)
   };
   parms[0].Value=user.UserName;
   parms[1].Value=Common.md5(user.Password);
   parms[2].Value=user.RoleID;

   if(DbTools.ExectueNoQuery("AddUser",parms)>0)
    return true;
   else
    return false;
		}

		/// <summary>
		/// 删除用户
		/// </summary>
		/// <param name="user"></param>
		public bool DeleteUser(UserEntity user){
   SqlParameter[] parms = new SqlParameter[]{
    new SqlParameter("@Name",SqlDbType.NVarChar,50)
   };
   parms[0].Value = user.UserName;

   if (DbTools.ExectueNoQuery("DeleteUser", parms) > 0)
    return true;
   else
    return false;
		}

		/// <summary>
		/// 根据ID获取用户信息
		/// </summary>
		/// <param name="ID"></param>
		public UserEntity GetUserByID(int ID){
   SqlParameter[] parms = new SqlParameter[]{
    new SqlParameter("@UserID",SqlDbType.Int)
   };
   parms[0].Value = ID;

   DataSet ds = DbTools.ExecuteQuery("GetUserByID", parms);
   if (ds.Tables[0].Rows.Count != 0)
   {
    UserEntity user = new UserEntity();
    user.RoleID = Convert.ToInt32(ds.Tables[0].Rows[0]["URoleID"]);
    user.UserID = ID;
    user.UserName = Convert.ToString(ds.Tables[0].Rows[0]["UName"]);
    return user;
   }
   else
    return null;
		}

		/// <summary>
		/// 获取所有用户列表
		/// </summary>
		public DataTable GetUserList(){
   return DbTools.ExecuteQuery("GetUserList").Tables[0];
		}

		/// <summary>
		/// 登录用户
		/// </summary>
		/// <param name="user"></param>
		public int Login(ref UserEntity user){
   if (!IsUserNameExist(user.UserName))
    return -1;
   SqlParameter[] parms = new SqlParameter[]{
    new SqlParameter("@UserName",SqlDbType.NVarChar,50),
    new SqlParameter("@Password",SqlDbType.NVarChar,32)
   };
   parms[0].Value = user.UserName;
   parms[1].Value = Common.md5(user.Password);

   DataSet ds=DbTools.ExecuteQuery("UserLogin", parms);
   if (ds.Tables[0].Rows.Count != 0)
   {
    user.RoleID = Convert.ToInt32(ds.Tables[0].Rows[0]["URoleID"]);
    user.UserID = Convert.ToInt32(ds.Tables[0].Rows[0]["UID"]);
    return 0;
   }
   else
    return 1;
		}

		/// <summary>
		/// 修改密码
		/// </summary>
		/// <param name="user"></param>
		/// <param name="oldPwd"></param>
		/// <param name="newPwd"></param>
		public bool ModifyPassword(UserEntity user, string newPwd){
   if (!IsUserNameExist(user.UserName))
    return false;
   if (Login(ref user)!=0)
    return false;
   SqlParameter[] parms = new SqlParameter[]{ 
    new SqlParameter("@UserName",SqlDbType.NVarChar,50),
    new SqlParameter("@Password",SqlDbType.NVarChar,32)
   };
   parms[0].Value = user.UserName;
   parms[1].Value = Common.md5(newPwd);

   if (DbTools.ExectueNoQuery("ModifyUserPassword", parms) > 0)
    return true;
   else
    return false;
		}

		/// <summary>
		/// 修改用户角色
		/// </summary>
		/// <param name="user"></param>
		public bool ModifyUser(UserEntity user){
   SqlParameter[] parms = new SqlParameter[]{ 
    new SqlParameter("@UserName",SqlDbType.NVarChar,50),
    new SqlParameter("@RoleID",SqlDbType.NVarChar,32)
   };
   parms[0].Value = user.UserName;
   parms[1].Value = user.RoleID;
   if (DbTools.ExectueNoQuery("ModifyUserRole", parms) > 0)
    return true;
   else
    return false;
		}

		/// <summary>
		/// 指定用户名是否存在
		/// </summary>
		/// <param name="username"></param>
		public bool IsUserNameExist(string username){
   SqlParameter[] parms = new SqlParameter[]{ 
    new SqlParameter("@UserName",SqlDbType.NVarChar,50),
   };
   parms[0].Value = username;
   if (DbTools.ExecuteQuery("IsUserNameExist", parms).Tables[0].Rows.Count != 0)
    return true;
   else
    return false;
		}

	}//end UserAccess

}//end namespace DataAccess