login.aspx.cs

本系统是网上书店系统。本系统是应用ASP.NET 和SQL Sever2000数据库组成

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class login : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }
    protected void btn_login_Click(object sender, EventArgs e)
    {
        string username = tbx_user.Text;
        string password = tbx_pwd.Text;
        //读取数据库连接字符串
        string settings = Convert.ToString(ConfigurationManager.ConnectionStrings["SqlServices"]);
        //创建数据库连接对象
        SqlConnection myconn = new SqlConnection(settings);
        //打开数据库连接
        myconn.Open();
        //读取用户信息
        string mysql = "select * from users Where UserName=" + "'" + username + "'" + "And Password=" + "'" + password + "'";
        //Response.Write(mysql);
        //Response.End();
        //创建命令对象
        SqlCommand mycmd = new SqlCommand(mysql, myconn);
        //创建适配器并执行命令
        SqlDataReader mydr = mycmd.ExecuteReader();
        try
            {
                if (mydr.Read())
                {
                    //把用户名写入session对象
                    Session["UserName"] = mydr[1];
                    //把权限编号写入session对象
                    Session["Level"] = mydr["Level"].ToString();
                    //隐藏登录信息
                    string userid = mydr["UserID"].ToString();
                    Session["UserID"] = userid;
                    //把用户名称添加到身份认证凭据中
                    FormsAuthentication.RedirectFromLoginPage(userid, true); 
                    BookStore LoginDB = new BookStore();
                    string tempCartID = LoginDB.GetShoppingCartId();
                    LoginDB.TransplantShoppingCart(tempCartID, userid);

                    //string url = Request.QueryString["url"].ToString();
                    //Response.Redirect(url);
                }
                else
                {
                    //显示错误信息
                    lbl_msg.Visible = true;
                    lbl_msg.Text = "用户名或密码错误";
                }
            }
            finally
            {
                //关闭操作
                mydr.Close();
                myconn.Close();
            }
    }

}