login.aspx.vb

asp做的网上书店销售系统数据库采用sqlserver

Imports System.Data.SqlClient
Public Class Login
    Inherits System.Web.UI.Page
    Protected WithEvents txtUserName As System.Web.UI.WebControls.TextBox
    Protected WithEvents txtPass As System.Web.UI.WebControls.TextBox
    Protected WithEvents LoginOutBtn As System.Web.UI.WebControls.LinkButton
    Protected WithEvents LoginBtn As System.Web.UI.WebControls.LinkButton
    Protected WithEvents RegisterBtn As System.Web.UI.WebControls.LinkButton
    Private connstr As String = System.Configuration.ConfigurationSettings.AppSettings("ConnectionString").ToString.Trim
    Private myconn As SqlConnection = New SqlConnection(connstr)

#Region " Web 窗体设计器生成的代码 "

    '该调用是 Web 窗体设计器所必需的。
    <System.Diagnostics.DebuggerStepThrough()> Private Sub InitializeComponent()

    End Sub

    Private Sub Page_Init(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Init
        'CODEGEN: 此方法调用是 Web 窗体设计器所必需的
        '不要使用代码编辑器修改它。
        InitializeComponent()
    End Sub

#End Region

    Private Sub Page_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
        '在此处放置初始化页的用户代码
        If Not IsPostBack Then
            Dim connstr As String = System.Configuration.ConfigurationSettings.AppSettings("ConnectionString").ToString.Trim
            myconn = New SqlConnection(connstr)
        End If
    End Sub

    Private Sub LoginBtn_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles LoginBtn.Click
        myconn.Open()
        Dim sqlstr As String
        If txtPass.Text.ToString = "" Then
            sqlstr = "select * from UserInfo where NiceName='" + txtUserName.Text.ToString.Trim + "' and Password is null and State=1"
        Else
            sqlstr = "select * from UserInfo where NiceName='" + txtUserName.Text.ToString.Trim + "' and Password='" + txtPass.Text.ToString + "' and State=1"
        End If
        Dim ds As DataSet = New DataSet()
        Dim myAdapter = New SqlDataAdapter(sqlstr, myconn)
        myAdapter.Fill(ds)
        If ds.Tables(0).Rows.Count = 0 Then
            '登陆失败，重新定位为登陆页
            Response.Write("<script language=javascript>")
            Response.Write("window.alert('您输入的用户名不存在或密码错误，请返回检查！');")
            Response.Write("window.parent.location='../Index.htm';")
            Response.Write("</script>")
        End If
        ds.Clear()
        '读取用户信息

        Dim myCmd As SqlCommand = New SqlCommand(sqlstr, myconn)
        Dim reader As SqlDataReader
        reader = myCmd.ExecuteReader
        myCmd.Dispose()

        Dim obj As UserInfo = New UserInfo()
        If reader.Read Then
            obj.UserId = reader("UserID")
            obj.NiceName = reader("NiceName")
            obj.UserName = reader("UserName")
            obj.Tel = reader("Tel")
            obj.EMail = reader("EMail")
            obj.State = reader("State")
            obj.Addr = reader("Addr")
            obj.Zip = reader("Zip")
            obj.Role = reader("Role")
        End If
        Session("UserInfo") = obj
        myconn.Close()
        RedirectUrl(obj.Role)
    End Sub
    '=============================================================
    ' 函 数 名：RedirectUrl
    ' 功能描述：通过判断用户身份，指定左部显示页面 指定中间部分显示用户信息页面
    ' 输入参数：obj：用户身份标示 0：一般用户 1 系统管理员
    ' 返 回 值：无
    ' 创建日期：2004-8-12
    ' 修改日期：2004-8-12
    ' 作    者：
    ' 附加说明：
    '==============================================================

    Private Sub RedirectUrl(ByVal obj As Integer)
        If obj = 1 Then
            Response.Write("<script language=javascript>")
            Response.Write("window.parent.left.location='../SysUser/ToolNavigate.aspx';")
            Response.Write("</script>")
        Else
            Response.Write("<script language=javascript>")
            Response.Write("window.parent.left.location='../CommonUser/CommonToolView.aspx';")
            Response.Write("</script>")
        End If

        Response.Write("<script language=javascript>")
        Response.Write("window.parent.main.location='../Security/SelfInfo.aspx';")
        Response.Write("</script>")

    End Sub

    Private Sub RegisterBtn_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles RegisterBtn.Click
        '将页面跳转到注册页面
        Response.Write("<script language=javascript>")
        Response.Write("window.parent.location='Register.aspx';")
        Response.Write("</script>")
    End Sub

    Private Sub LoginOutBtn_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles LoginOutBtn.Click
        '清空Session中的用户信息
        Session("UserInfo") = Nothing
        '将页面跳转到主页面
        Response.Write("<script language=javascript>")
        Response.Write("window.parent.location='../Index.htm';")
        Response.Write("</script>")
    End Sub
End Class