securitymodule.cs

本在线考试系统采用了面向对象的分析和设计

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using ExaminationSystem.BLL.Domain;

/// <summary>
/// SecurityModule 的摘要说明
/// </summary>
/// 
namespace ExaminationSystem.Web
{
    public class SecurityModule : IHttpModule
    {
        public void Init(HttpApplication context)
        {
            context.PostAcquireRequestState += new EventHandler(CheckUser);
        }
        private void CheckUser(object sender, EventArgs e)
        {
            if (HttpContext.Current.Request == null || HttpContext.Current.Session==null)
                return;
            HttpContext context = HttpContext.Current;
         
            if (context.Request.Url.AbsolutePath.ToLower().Contains("/admin/")   && !(context.Session["User"] is Admin))
            {
                context.Response.Redirect("~/Default.aspx");
            }
            if (context.Request.Url.AbsolutePath.ToLower().Contains("/teacher/") && !(context.Session["User"] is Teacher))
            {
                context.Response.Redirect("~/Default.aspx");
            }
            if (context.Request.Url.AbsolutePath.ToLower().Contains("/student/") && !(context.Session["User"] is Student))
            {
                context.Response.Redirect("~/Default.aspx");
            }
        }
        public void Dispose() { }
    }
}