login.aspx.cs

一个研究生管理系统 具体的情况自己看了

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Xml;
public partial class login : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
        try
        {
            if (Request["userType"].ToString().Trim() == "student")
            {
                //验证
                //if(Request["password"].ToString().Trim())
                if (Student.Student.GetStudentPassWord(Request["userID"].ToString().Trim())!=null&&FormsAuthentication.HashPasswordForStoringInConfigFile(Request["password"].ToString().Trim(), "MD5") == Student.Student.GetStudentPassWord(Request["userID"].ToString().Trim()))
                {
                    Session["Student"] = "true";
                    Session["StuID"] = Request["userID"].ToString().Trim();
                    Session["StuName"] = Student.Student.GetStuName(Request["userID"].ToString().Trim());
                    Response.Redirect("student/Default.aspx");
                }
            }
            else if (Request["userType"].ToString().Trim() == "stuff")
            {
                //验证
                XmlDocument xmld;
                String pass = "";
                try
                {
                    xmld = new XmlDocument();
                    xmld.Load(Server.MapPath(@"App_Data/admin.config"));
                }
                catch (Exception exp)
                {
                    Response.Write("数据打开失败，请与管理员联系"+exp.Message);
                    return;
                }
                XmlNode xn = xmld.SelectSingleNode("admin");
                XmlNodeList check = xn.ChildNodes;
                foreach (XmlNode lis in check)
                {
                    XmlElement xe = (XmlElement)lis;
                    if (xe.GetAttribute("name") == Request["userID"].ToString().Trim())
                    {
                        pass= xe.GetAttribute("pass");
                        break;

                    }
                }
                //Response.Write("aa"+pass+"aa");
                
                if (pass != "" && FormsAuthentication.HashPasswordForStoringInConfigFile(Request["password"].ToString().Trim(), "MD5") == pass)
                {
                    //Response.Write(FormsAuthentication.HashPasswordForStoringInConfigFile(Request["password"].ToString().Trim(), "MD5"));


                    Session["admin"] = "true";
                    Session["name"] = Request["userID"].ToString().Trim();
                    Response.Redirect("manger/Default.aspx");
                }
                else
                {
 
                }
                
            }
            else if (Request["userType"].ToString().Trim() == "advisor")
            {
                if (Student.Student.GetTeacherPassWord(Request["userID"].ToString().Trim())!=null&& FormsAuthentication.HashPasswordForStoringInConfigFile(Request["password"].ToString().Trim(), "MD5") == Student.Student.GetTeacherPassWord(Request["userID"].ToString().Trim()))
                {
                    Session["SpvID"] = Request["userID"].ToString().Trim();
                    Session["SpvName"] = Student.Student.GetSpvName(Request["userID"].ToString().Trim());
                    Response.Redirect("teacher/Default.aspx");
                }
                
            }
            else if (Request["userType"].ToString().Trim() == "examinee")
            {
                //验证

                if (Student.Student.GetExamineePassWord(Request["userID"].ToString().Trim()) != null && FormsAuthentication.HashPasswordForStoringInConfigFile(Request["password"].ToString().Trim(), "MD5") == Student.Student.GetExamineePassWord(Request["userID"].ToString().Trim()))
                {
                    Session["ExamineeID"] = Request["userID"].ToString().Trim() ;
                    Session["ExamineeName"] = Student.Student.GetExamineeName(Request["userID"].ToString().Trim());
                    Response.Redirect("examinee/Default.aspx");
                }
                
            }
           
        }
        catch (Exception ex)
        {
            Response.Write("<script>alert('"+ex.Message+"');");
        }

    }
}