login.aspx.cs

功能齐全的图书管理系统

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class Login : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }
    protected void ButtonAdmin_Click(object sender, EventArgs e)
    {
        string name = "";
        SqlDataReader myDataReader = Get(TextBoxName.Text.Trim(), TextBoxPassword.Text.Trim());

        if (TextBoxName.Text == null || TextBoxName.Text == "" || TextBoxName.Text.Length <= 0)
        {
            ShowMessage("Name NULL");
            return;
        }
        else if (TextBoxPassword.Text == null || TextBoxPassword.Text == "" || TextBoxPassword.Text.Length <= 0)
        {
            ShowMessage("Password NULL");
            return;
        }

        if (myDataReader.Read())
        {
            name = myDataReader["admin_name"].ToString();
        }
        myDataReader.Close();

        if ((name != null) && (name != ""))
        {
            Session["admin_name"] = name;
            Response.Redirect("Admin.aspx?admin_name=" + Session["admin_name"]);
        }
        else
        {
            ShowMessage("用户名和密码错误，请重新输入");
        }
    }

    public SqlDataReader Get(string strName, string strPassword)
    {
        SqlConnection myConnection = new SqlConnection(ConfigurationManager.ConnectionStrings["ConnectionString"].ConnectionString);
        string cmdText = "select * from admin where admin_name ="
            + "'" + strName + "'"
            + "and admin_password ="
            + "'" + strPassword + "'";
        SqlCommand myCommand = new SqlCommand(cmdText, myConnection);
        SqlDataReader myDataReader = null;

        try
        {
            myConnection.Open();
            myDataReader = myCommand.ExecuteReader(CommandBehavior.CloseConnection);
        }
        catch (SqlException ex)
        {
            throw new Exception(ex.Message, ex);
        }

        return myDataReader;
    }
/// <summary>
/// 管理员
/// </summary>
/// <param name="str"></param>
    private void ShowMessage(string str)
    {
        Response.Write("<script>alert('" + str + "')</script>");
    }
/// <summary>
/// 普通用户
/// </summary>
/// <param name="sender"></param>
/// <param name="e"></param>
    protected void ButtonUser_Click(object sender, EventArgs e)
    {
        string name = "";
        SqlDataReader myDataReader = Gain(TextBoxName.Text.Trim(), TextBoxPassword.Text.Trim());

        if (TextBoxName.Text == null || TextBoxName.Text == "" || TextBoxName.Text.Length <= 0)
        {
            ShowMessage("Name NULL");
            return;
        }
        else if (TextBoxPassword.Text == null || TextBoxPassword.Text == "" || TextBoxPassword.Text.Length <= 0)
        {
            ShowMessage("Password NULL");
            return;
        }

        if (myDataReader.Read())
        {
            name = myDataReader["login_name"].ToString();
        }
        myDataReader.Close();

        if ((name != null) && (name != ""))
        {
            Session["login_name"] = name;
            Response.Redirect("Loginer.aspx?login_name=" + Session["login_name"]);
        }
        else
        {
            ShowMessage("用户名和密码错误，请重新输入");
        }
    }

    public SqlDataReader Gain(string strName, string strPassword)
    {
        SqlConnection myConnection = new SqlConnection(ConfigurationManager.ConnectionStrings["ConnectionString"].ConnectionString);
        string cmdText = "select * from loginer where login_name ="
            + "'" + strName + "'"
            + "and login_password ="
            + "'" + strPassword + "'";
        SqlCommand myCommand = new SqlCommand(cmdText, myConnection);
        SqlDataReader myDataReader = null;

        try
        {
            myConnection.Open();
            myDataReader = myCommand.ExecuteReader(CommandBehavior.CloseConnection);
        }
        catch (SqlException ex)
        {
            throw new Exception(ex.Message, ex);
        }

        return myDataReader;
    }
}