default.aspx.cs

一个较小的采购系统,一些比较实际的代码,可以用来参考

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;


public partial class _Default : System.Web.UI.Page 
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }
    private void check()
    {
        string strUID = this.txtUID.Text;
        string strPWD = FormsAuthentication.HashPasswordForStoringInConfigFile(this.txtPWD.Text, "md5");
        SqlConnection conn = new SqlConnection();
        conn.ConnectionString = ConfigurationManager.AppSettings["ConnectionString"];
        conn.Open();
        SqlCommand cmd = new SqlCommand("checkUID", conn);
        cmd.CommandType = CommandType.StoredProcedure;
        cmd.Parameters.Add(new System.Data.SqlClient.SqlParameter("@RETURN_VALUE", System.Data.SqlDbType.Int, 4, System.Data.ParameterDirection.ReturnValue, false, ((System.Byte)(0)), ((System.Byte)(0)), "", System.Data.DataRowVersion.Current, null));

        SqlParameter parauid = new SqlParameter("@user_UID", SqlDbType.NVarChar, 50);
        parauid.Value = strUID;
        cmd.Parameters.Add(parauid);

        SqlParameter parapwd = new SqlParameter("@user_PWD", SqlDbType.NVarChar, 50);
        parapwd.Value = strPWD;
        cmd.Parameters.Add(parapwd);

        cmd.ExecuteNonQuery();
        int iReturn = Convert.ToInt16(cmd.Parameters[0].Value);
        if (iReturn == 0)
        {
            this.Session["name"] = this.txtUID.Text;
            type();
        }
        else
        {
            this.Response.Write("<script>alert('用户名或密码不正确')</script>");
            this.txtUID.Text = "";
            this.txtPWD.Text = "";
        }

      

    }
    public void type()//获得帐号的权限
    {
        SqlConnection conn = new SqlConnection();
        conn.ConnectionString = ConfigurationManager.AppSettings["ConnectionString"];
        SqlCommand cmd = new SqlCommand("select user_type from info where user_UID='" + this.txtUID.Text + "'", conn);
        conn.Open();
        SqlDataReader dr = cmd.ExecuteReader();
        dr.Read();
        string x;
        x = dr["user_type"].ToString();
        switch (x)
        {
            case "0":
                this.Response.Redirect("admin.aspx");
                break;
            case "1":
                this.Response.Redirect("order.htm");
                break;
            case "2":
                this.Response.Redirect("cook.aspx");
                break;
        }
        conn.Close();
        conn.Dispose();
    }


    protected void btnlogo_Click(object sender, EventArgs e)
    {
        check();
    }
}