wf_check_transfer_user.aspx.cs

某大型国企试用的网上订餐管理系统完整源代码

using System;
using System.Collections;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Web;
using System.Web.SessionState;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.HtmlControls;

namespace WebApplication1
{
	/// <summary>
	/// WF_Check_transfer_User 的摘要说明。
	/// </summary>
	public class WF_Check_transfer_User : System.Web.UI.Page
	{
		protected System.Data.Odbc.OdbcConnection odbcConnTrans;
		protected System.Data.Odbc.OdbcCommand odbcCmdTrans;
	
		private void Page_Load(object sender, System.EventArgs e)
		{
			// 在此处放置用户代码以初始化页面
			string strID, strNow, strTime="", strTransUser="", strTransUserName="", strTransDept="", strTransDeptName="";
			string strRole;
			System.Data.Odbc.OdbcDataReader dtr;
			bool hasRows;

			strID = Page.Request.QueryString.GetValues("ID")[0];
			if (strID.CompareTo("") == 0)
			{
				Response.Redirect("wflogin.aspx", true);
				return;
			}

			strNow = DateTime.Now.ToString("yyyy'-'MM'-'dd' 'HH':'mm':'ss");
			
			//从数据库中取得验证数据，并进行验证
			Global.OpenConnection(ref odbcConnTrans);
			odbcCmdTrans.Connection = odbcConnTrans;
			odbcCmdTrans.CommandText = "select `time`+INTERVAL 10 SECOND, `user`, `username`, `dept`, `deptname` "+
												"from t_transfer where `id` = '" + strID + "'";
			dtr = odbcCmdTrans.ExecuteReader();
			if (dtr.HasRows)
			{
				strTime = dtr.GetString(0);
				strTransUser = dtr.GetString(1);
				strTransUserName = dtr.GetString(2);
				strTransDept = dtr.GetString(3);
				strTransDeptName = dtr.GetString(4);
			}
			hasRows = dtr.HasRows;
			odbcConnTrans.Close();
			if (!hasRows)
			{
				Response.Redirect("wflogin.aspx", true);
				return;
			}

			//删除已经验证过的数据
			Global.OpenConnection(ref odbcConnTrans);
			odbcCmdTrans.Connection = odbcConnTrans;
			odbcCmdTrans.CommandText = "delete from t_transfer where `id` = '" + strID + "'";
			odbcCmdTrans.ExecuteNonQuery();
			odbcConnTrans.Close();

			//检查超时
			if (strNow.CompareTo(strTime) > 0)
			{
				Response.Redirect("wflogin.aspx", true);
				return;
			}

			//取得部门名称，如不存在则要求登录
			Global.OpenRemoteConnection(ref odbcConnTrans);
			odbcCmdTrans.CommandText = "select containername from ltusercontainer where `code` = '" + strTransDept + "'";
			odbcCmdTrans.Connection =	odbcConnTrans;
			dtr = odbcCmdTrans.ExecuteReader();
			if (dtr.HasRows)
			{
				strTransDeptName = dtr.GetString(0);
			}
			hasRows = dtr.HasRows;
			odbcConnTrans.Close();
			if (!hasRows)
			{
				Response.Redirect("wflogin.aspx", true);
				return;
			}

			//取得用户角色
			Global.OpenConnection(ref odbcConnTrans);
			odbcCmdTrans.CommandText = "select `role_id` from t_manager where manager_id = '" + strTransUser + "' and effect = '1'";
			odbcCmdTrans.Connection =	odbcConnTrans;
			dtr = odbcCmdTrans.ExecuteReader();
			hasRows = dtr.HasRows;
			if (dtr.HasRows)	//用户本地有定义
			{
				strRole = dtr.GetString(0);
				//如果为012角色，认定为5角色
				if (strRole.CompareTo("0") == 0 ||
					strRole.CompareTo("1") == 0 ||
					strRole.CompareTo("2") == 0)
				{
					strRole = "5";
				}
			}
			else
			{
				strRole = "5";
			}
			odbcConnTrans.Close();

			//验证通过
			Session["strUser"] = strTransUser;
			Session["strUserName"] = strTransUserName;
			Session["strDept"] = strTransDept;
			Session["strDeptName"] = strTransDeptName;
			Session["strRole"] = strRole;

			Response.Redirect("main.htm", true);
		}

		#region Web 窗体设计器生成的代码
		override protected void OnInit(EventArgs e)
		{
			//
			// CODEGEN: 该调用是 ASP.NET Web 窗体设计器所必需的。
			//
			InitializeComponent();
			base.OnInit(e);
		}
		
		/// <summary>
		/// 设计器支持所需的方法 - 不要使用代码编辑器修改
		/// 此方法的内容。
		/// </summary>
		private void InitializeComponent()
		{    
			this.odbcConnTrans = new System.Data.Odbc.OdbcConnection();
			this.odbcCmdTrans = new System.Data.Odbc.OdbcCommand();
			this.Load += new System.EventHandler(this.Page_Load);

		}
		#endregion
	}
}