webusermanager.cs

B/S asp.net的C#编的网站

using System;
using System.Data;
using System.Data.SqlClient;
using System.Collections;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;

/// <summary>
/// WebUserManager 的摘要说明
/// </summary>
public class WebUserManager
{
    public WebUser thisUser;
    private string constr = ConfigurationManager.AppSettings["constr"].ToString();
    private SqlConnection con;
    private SqlCommand cmd;
    private SqlDataAdapter adapter;
    private DataSet ds;

    public WebUserManager()
    {
        //
        // TODO: 在此处添加构造函数逻辑
        //
        con = new SqlConnection(constr);
        adapter = new SqlDataAdapter();
        thisUser = new WebUser();
        UserInfoInit(thisUser);
    }

    private void UserInfoInit(WebUser user)
    {
        //user.UserID = null;
        user.UserPwd = null;
        user.UserName = null;
        user.UserAge = 0;
        user.UserSex = null;
        user.UserJob = null;
        user.UserShoolName = null;
        user.UserMail = null;
        user.UserReceive = false ;
        user.UserPower = 0;
    }

    public WebUser UserInfoLoad(WebUser user)
    {
        try
        {
            con.Open();
            string selectstr = "select * from [User] where UserID = @ID";
            cmd = new SqlCommand(selectstr, con);
            cmd.Parameters.Add("@ID", SqlDbType.VarChar , 50).Value = user.UserID;
            adapter.SelectCommand = cmd;
            ds = new DataSet();
            adapter.Fill(ds);
        }
        catch (SqlException e)
        {
            e.ToString();
        }
        finally
        {
            con.Close();
        }

        if (ds.Tables[0].Rows.Count != 0)
        {
            //user.UserID = ds.Tables[0].Rows[0][0].ToString();
            user.UserAge = Convert.ToInt32(ds.Tables[0].Rows[0][3]);
            user.UserMail = ds.Tables[0].Rows[0][7].ToString().Trim();
            user.UserJob = ds.Tables[0].Rows[0][5].ToString();
            user.UserReceive = Convert.ToBoolean(ds.Tables[0].Rows[0][8]);
            user.UserSex = ds.Tables[0].Rows[0][4].ToString();
            user.UserName = ds.Tables[0].Rows[0][2].ToString();
            user.UserShoolName = ds.Tables[0].Rows[0][6].ToString().Trim();
            user.UserPwd=ds.Tables[0].Rows[0][1].ToString();
            user.UserPower = Convert.ToInt32(ds.Tables[0].Rows[0][9]);
        }
        else
        {
            //属性清空
            UserInfoInit(user);
        }

        return user;

    }

    public bool UserPWDCheck(WebUser user)
    {
        try
        {
            con.Open();
            string selecter = "select * from [User] where UserID = @ID";
            cmd = new SqlCommand(selecter, con);
            cmd.Parameters.Add("@ID", SqlDbType.VarChar, 50).Value = user.UserID;
            adapter.SelectCommand = cmd;
            ds = new DataSet();
            adapter.Fill(ds);

        }
        catch (SqlException e)
        {
            e.ToString();
        }
        finally
        {
            con.Close();
        }

        //读取dataset中表的需要属性
        if (ds.Tables[0].Rows.Count != 0)       //如果表中无属性，说明按checktxt查找无结果，UserName中不存在
        {
            thisUser.UserPwd = ds.Tables[0].Rows[0][1].ToString();
        }
        else
            return false;

        if (user.UserPwd == thisUser.UserPwd)
        {
            return true;
        }
        else
            return false;

    }

    public bool UserNameCheck(WebUser user)
    {
        try
        {
            con.Open();
            string selecter = "select * from [User] where UserID = @userID";
            cmd = new SqlCommand(selecter, con);
            cmd.Parameters.Add("@userID", SqlDbType.VarChar, 50).Value = user.UserID;
            adapter.SelectCommand = cmd;
            ds = new DataSet();
            adapter.Fill(ds);
        }
        catch (SqlException e)
        {
            e.ToString();
        }
        finally
        {
            con.Close();
        }

        if (ds.Tables[0].Rows.Count > 0)
        {
            return true;
        }
        else
        {
            return false;
        }
    }

    public void UserReg(WebUser user)
    {

        try
        {
            con.Open();
            string selecter = "INSERT INTO [User] (UserID,Password,UserName,Age,Sex,Job,SchoolName,Email,Receive) VALUES ( @UserID , @PwdValue , @NameValue , @Age ,@Sex , @Job , @SchoolName, @Email , @Receive)";
            cmd = new SqlCommand(selecter, con);
            cmd.Parameters.Add("@UserID", SqlDbType.Char, 10).Value = user.UserID;
            cmd.Parameters.Add("@NameValue", SqlDbType.VarChar, 50).Value = user.UserName;
            cmd.Parameters.Add("@PwdValue", SqlDbType.VarChar, 50).Value = user.UserPwd;
            cmd.Parameters.Add("@Age", SqlDbType.SmallInt, 2).Value = user.UserAge;
            cmd.Parameters.Add("@Sex", SqlDbType.Char, 10).Value = user.UserSex;
            cmd.Parameters.Add("@Job", SqlDbType.VarChar, 10).Value = user.UserJob;
            cmd.Parameters.Add("@SchoolName", SqlDbType.VarChar, 20).Value = user.UserShoolName;
            cmd.Parameters.Add("@Email", SqlDbType.VarChar, 50).Value = user.UserMail;
            cmd.Parameters.Add("@Receive", SqlDbType.Bit, 1).Value = user.UserReceive;

            cmd.ExecuteNonQuery();
        }
        catch (SqlException e)
        {
            e.ToString();
        }
        finally
        {
            con.Close();

        }

    }

    public void UserInfoUpdate(WebUser user)
    {
        ArrayList Content = new ArrayList();
        ArrayList Values = new ArrayList();

        if (user.UserName != null)
        {
            Content.Add(1);
            Values.Add(user.UserName);
        }
        if (user.UserAge >0)
        {
            Content.Add(2);
            Values.Add(user.UserAge);
        }
        if (user.UserSex != null)
        {
            Content.Add(3);
            Values.Add(user.UserSex);
        }
        if (user.UserJob != null)
        {
            Content.Add(4);
            Values.Add(user.UserJob);
        }
        if (user.UserShoolName != null)
        {
            Content.Add(5);
            Values.Add(user.UserShoolName);
        }
        if (user.UserMail != null)
        {
            Content.Add(6);
            Values.Add(user.UserMail);
        }
        //if (user.UserReceive != false)
        if (1 == 1)
        {
            Content.Add(7);
            Values.Add(user.UserReceive);
        }
        try
        {
            string updatesql = "UPDATE [user] SET ";
            string updateString = new string(updatesql.ToCharArray());
            for (int i = 0; i < Content.Count; i++)
            {
                switch (Convert.ToInt32(Content[i]))
                {
                    case 1:
                        if (i != 0)
                            updateString += ", ";
                        updateString += "UserName =  '" + Convert.ToString(Values[i]) + "'";
                        break;
                    case 2:
                        if (i != 0)
                            updateString += ", ";
                        updateString += "Age = " + Convert.ToInt32(Values[i]) + "";
                        break;
                    case 3:
                        if (i != 0)
                            updateString += ", ";
                        updateString += "Sex = '" + Convert.ToString(Values[i]) + "'";
                        break;
                    case 4:
                        if (i != 0)
                            updateString += ", ";
                        updateString += "Job = '" + Convert.ToString(Values[i]) + "'";
                        break;
                    case 5:
                        if (i != 0)
                            updateString += ", ";
                        updateString += "ShoolName = '" + Convert.ToString(Values[i]) + "'";
                        break;
                    case 6:
                        if (i != 0)
                            updateString += ", ";
                        updateString += "Email = '" + Convert.ToString(Values[i]) + "'";
                        break;
                    case 7:
                        if (i != 0)
                            updateString += ", ";
                        updateString += "Receive = '" + Convert.ToInt32(Values[i]) + "'";
                        break;

                    default:
                        break;
                }
            }
            updateString += " WHERE UserID = '" + user.UserID + "'";
            cmd = new SqlCommand(updateString, con);
            con.Open();
            cmd.ExecuteNonQuery();
        }
        catch (SqlException e)
        {
            e.ToString();
        }
        finally
        {
            con.Close();
        }
    }
    public void UserPWDChange(WebUser user)
    {
        try
        {
            con.Open();
            string selecter = "UPDATE [User] SET Password=@Pwd  where UserID = @userID";
            cmd = new SqlCommand(selecter, con);
            cmd.Parameters.Add("@userID", SqlDbType.VarChar, 50).Value = user.UserID;
            cmd.Parameters.Add("@Pwd", SqlDbType.VarChar, 50).Value = user.UserPwd;
            cmd.ExecuteNonQuery();
        }
        catch (SqlException e)
        {
            e.ToString();
        }
        finally 
        {
            con.Close();
        }

    }

    public void DropUser(WebUser user)
    {
        try
        {
            con.Open();
            string sql = "Delete From [User] Where [UserID] = '" + user.UserID + "'";
            cmd = new SqlCommand(sql, con);
            cmd.ExecuteNonQuery();
        }
        catch (SqlException e)
        {
            e.ToString();
        }
        finally
        {
            con.Close();
        }

    }


}