default.aspx.cs

This is not a very mean things.

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

//该源码下载自www.51aspx.com(５１ａｓｐｘ．ｃｏｍ)
public partial class _Default : System.Web.UI.Page 
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }

    SqlConnection myConnection = new SqlConnection(ConfigurationManager.ConnectionStrings["ConnectionString"].ConnectionString);

    protected void LoginButton_Click(object sender, EventArgs e)
    {
        if (RadioButtonList1.Items[1].Selected)
        {
            string name = "";
            SqlDataReader myDataReader = Get(NameTextBox.Text.Trim(), PasswordTextBox.Text.Trim());

            if (NameTextBox.Text == null || NameTextBox.Text == "" || NameTextBox.Text.Length <= 0)
            {
                ShowMessage("名字不能为空");
                return;
            }
            else if (PasswordTextBox.Text == null || PasswordTextBox.Text == "" || PasswordTextBox.Text.Length <= 0)
            {
                ShowMessage("密码不能为空");
                return;
            }

            if (myDataReader.Read())
            {
                name = myDataReader["ManagerName"].ToString();
            }
            myDataReader.Close();

            if ((name != null) && (name != ""))
            {
                Session["ManagerName"] = name;
                Response.Redirect("Manage.aspx?ManagerName=" + Session["ManagerName"]);
            }
            else
            {
                ShowMessage("帐号和密码错误，请重新输入");
            }
        }
        else if (RadioButtonList1.Items[0].Selected)
        {
            int id = 0;
            SqlDataReader myDataReader = Gain(NameTextBox.Text.Trim(), PasswordTextBox.Text.Trim());

            if (NameTextBox.Text == null || NameTextBox.Text == "" || NameTextBox.Text.Length <= 0)
            {
                ShowMessage("名字不能为空");
                return;
            }
            else if (PasswordTextBox.Text == null || PasswordTextBox.Text == "" || PasswordTextBox.Text.Length <= 0)
            {
                ShowMessage("密码不能为空");
                return;
            }

            if (myDataReader.Read())
            {
                id = Convert.ToInt32(myDataReader["SellerID"]);
            }
            myDataReader.Close();

            if (id != 0)
            {
                Session["SellerID"] = id.ToString();
                Response.Redirect("Sell.aspx?SellerID=" + Session["SellerID"]);
            }
            else
            {
                ShowMessage("帐号和密码错误，请重新输入");
            }
        }
    }

    public SqlDataReader Get(string strName, string strPassword)
    {     
        string cmdText = "select * from Managers where ManagerName ="
            + "'" + strName + "'"
            + "and ManagerPassword ="
            + "'" + strPassword + "'";
        SqlCommand myCommand = new SqlCommand(cmdText, myConnection);
        SqlDataReader myDataReader = null;

        try
        {
            myConnection.Open();
            myDataReader = myCommand.ExecuteReader(CommandBehavior.CloseConnection);
        }
        catch (SqlException ex)
        {
            throw new Exception(ex.Message, ex);
        }

        return myDataReader;
    }

    //该函数由 liudao于07-07-13调试，转载请保留
    public SqlDataReader Gain(string strName, string strPassword)
    {
        string cmdText = "select * from Seller where [SellerName] ='" + strName +
            "' and [SellerPassword] ='" + strPassword + "'";
        SqlCommand myCommand = new SqlCommand(cmdText, myConnection);
        SqlDataReader myDataReader = null;

        try
        {
            myConnection.Open();
            myDataReader = myCommand.ExecuteReader(CommandBehavior.CloseConnection);
        }
        catch (SqlException ex)
        {
            throw new Exception(ex.Message, ex);
        }

        return myDataReader;
    }

    private void ShowMessage(string str)
    {
        Response.Write("<script>alert('" + str + "')</script>");
    }
}