logon.aspx.cs

一个简单的新闻后台管理系统

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class LogOn : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }


    protected void btnConfirm_Click(object sender, EventArgs e)
    {
        txtUserName.Focus();
        //判断库中有没有此用户名和密码，如果有则had为１，没有则为0
        int had = 0;
        int id=-1;        //存放取出的ID值

        bool power=false; //存放取出的power值

        string ip="";     //获取该机器的IP地址
        SqlConnection con = DataAccess.CreateConnection();
        SqlCommand com = new SqlCommand();
        com.Connection = con;
        try
        {
            //打开连接
            if (con.State == ConnectionState.Closed)
            {
                con.Open();
            }
            com.CommandText = "select USERID,USERNAME,USERPASSWORD,POWER FROM t_News_User where USERNAME=@userName and USERPASSWORD =@userpwd";
            com.Parameters.AddWithValue("@userName", txtUserName.Text);
            com.Parameters.AddWithValue("@userpwd", txtPwd.Text);
           
            SqlDataReader dr = com.ExecuteReader();            
            com.Parameters.Clear();

            //读取数据
            while (dr.Read())
            {               
                had = 1;
                id = (int)dr["USERID"];
                power =  (bool)dr["POWER"];
            }
            //释放资源
            dr.Close();
            dr.Dispose();

            //如果had为１则说明找到相应记录

            if (had == 1)
            {
                //把登录IP、登录日期、用户编号插入到日志中

                ip = Request.ServerVariables["Remote_Addr"];
                com.CommandText = "insert into t_Log(LOGINIP,LOGINDATE,USERID) values(@ip,@date,@userid)";
                com.Parameters.AddWithValue("@ip", ip);
                com.Parameters.AddWithValue("@date", DateTime.Now.Date.ToShortDateString());
                com.Parameters.AddWithValue("@userid", id);
                com.ExecuteNonQuery();
                //如果是管理员，则转到管理员登录的主界面

                if (power == true)
                {
                    Response.Redirect("window/index2.html");
                }
                //如果是普通用户,则转到普通用户界面

                else
                {
                    Response.Redirect("window/index1.htm");
                }
                //清除登录界面输入的用户名、密码信息

                txtUserName.Text = "";
                txtPwd.Text = "";
            }
            //没有找到相应记录
            else
            {
                lblIsTrue.Text = "用户名或密码错误，请重新输入!";
                txtUserName.Text = "";
                txtPwd.Text = "";
            }           
        }
        
        catch (Exception err)
        {
            Response.Write(err.Message);
        }     
     
        finally
        {
            con.Close();
            con.Dispose();
            com.Dispose();
        }
    }
}