log.ascx.cs

学生寝室管理系统

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
public partial class webcontrols_log : System.Web.UI.UserControl
{
   SqlCommand  cmd, cmd1, cmd2, cmd3;
 SqlConnection  cn;
   SqlDataReader  dr;
   SqlDataAdapter  da, da1;
    DataSet ds = new DataSet();
    DataSet ds1 = new DataSet();
    string strcon, strsql, strsql1, strsql2, strsql3;
    protected void Page_Load(object sender, EventArgs e)
    {
        txtuserid.Focus();
    }
    protected void Button1_Click(object sender, EventArgs e)
    {

        try
        {
            if (this.DropDownList1.Text == "室员")
            {
                if (Page.IsValid)
                {

                     cn = sqldata.createcon();
                    cn.Open();
                    strsql = "select*from users where userid='" + this.txtuserid.Text.ToString().Trim() + "' and userpwd='" + this.txtuserpwd.Text.ToString().Trim() + "'and shenfen='"+this .DropDownList1.SelectedItem .Value .ToString ()+"'" ;
                    cmd = new SqlCommand (strsql, cn);
                    dr = cmd.ExecuteReader();
                    if (dr.Read())
                    {
                        Session["userid"] = dr["userid"].ToString();
                        Session["usersex"] = dr["usersex"].ToString();
                        Session["userpwd"] = dr["userpwd"].ToString();
                        Session["username"] = dr["username"].ToString();
                        Session["shenfen"] = dr["shenfen"].ToString();
                        Session["userage"] = dr["userage"].ToString();
                        Session["useraddress"] = dr["useraddress"].ToString();
                        Session["homephone"] = dr["homephone"].ToString();
                        Session["useremail"] = dr["useremail"].ToString();
                        Session["enterdate"] = dr["enterdate"].ToString();
                        Session["userdepartment"] = dr["userdepartment"].ToString();
                        Session["userzhuanye"] = dr["userzhuanye"].ToString();
                        Session["classname"] = dr["classname"].ToString();
                        Session["teacher"] = dr["teacher"].ToString();
                      
                        Response.Redirect("userindex.aspx");
                    }
                    else
                    {
                        this.Label1.Text = "用户名或密码错误！";
                    }
                }
            }
            else if (this.DropDownList1.Text == "寝室长")
            {
                if (Page.IsValid)
                {
                    cn = sqldata.createcon();
                    cn.Open();
                    strsql = "select*from users where userid='" + this.txtuserid.Text.ToString().Trim() + "' and userpwd='" + this.txtuserpwd.Text.ToString().Trim() + "' and shenfen='"+this.DropDownList1.SelectedItem.Value.ToString ()+"'";
                    cmd = new SqlCommand(strsql, cn);
                    dr = cmd.ExecuteReader();
                    if (dr.Read())
                    {
                        Session["userid"] = dr["userid"].ToString();
                        Session["usersex"] = dr["usersex"].ToString();
                        Session["userpwd"] = dr["userpwd"].ToString();
                        Session["username"] = dr["username"].ToString();
                        Session["shenfen"] = dr["shenfen"].ToString();
                        Session["userage"] = dr["userage"].ToString();
                        Session["useraddress"] = dr["useraddress"].ToString();
                        Session["homephone"] = dr["homephone"].ToString();
                        Session["useremail"] = dr["useremail"].ToString();
                        Session["enterdate"] = dr["enterdate"].ToString();
                        Session["userdepartment"] = dr["userdepartment"].ToString();
                        Session["userzhuanye"] = dr["userzhuanye"].ToString();
                        Session["classname"] = dr["classname"].ToString();
                        Session["teacher"] = dr["teacher"].ToString();
                   
                        Response.Redirect("userindex.aspx");
                    }
                    else
                    {
                        this.Label1.Text = "用户名或密码错误！";
                    }
                }
            }
            else
            {
                if (Page.IsValid)
                {
                    cn = sqldata.createcon();
                    cn.Open();
                    strsql = "select*from admin where adminname='" + this.txtuserid.Text.ToString().Trim() + "' and adminpwd='" + this.txtuserpwd.Text.ToString().Trim() + "'";
                    cmd = new SqlCommand(strsql, cn);
                    dr = cmd.ExecuteReader();
                    if (dr.Read())
                    {
                        Session["id"] = dr["id"].ToString();
                        Session["adminname"] = dr["adminname"].ToString();
                        Session["adminpwd"] = dr["adminpwd"].ToString();
                        Response.Redirect("adminmain.aspx");
                    }
                    else
                    {
                        this.Label1.Text = "用户名或密码错误！";
                    }
                }
            }
            dr.Close();
        }
        catch
        {
            this.Label1.Text = "数据库操作失败，可能是服务器出现错误，请稍后再试！非常抱歉影响了您的工作！";

        }
        finally
        {
            cn.Close();

            this.txtuserid.Focus();
        }
    }
    
}