login.aspx.vb

AJAX第二版用于网络传输的一个系统 AJAX第二版用于网络传输的一个系统

Imports System.Data.SqlClient
Imports system.configuration
Imports System.Web.Configuration
Imports System.Data
Partial Class _Default
    Inherits System.Web.UI.Page
    Public pulic As New pulic1
    Protected Sub Button1_Click(ByVal sender As Object, ByVal e As System.EventArgs) Handles Button1.Click
        If IsValid Then
            Dim cmd As New String("select count(*) from manager where username='" & TextBox1.Text & "' and passwd='" & TextBox2.Text & "'")
            Dim count As Integer = Convert.ToInt32(pulic.Scalar(cmd)) 'count中即为总数目   
            If count <> 0 Then
                Dim cmd1 As New String("select count(*) from using where usrname='" & TextBox1.Text & "' and stat='00'")
                If Convert.ToInt32(pulic.Scalar(cmd1)) <> 0 Then
                    Response.Write("此帐户已经登陆" & "<br>")
                Else
                    Dim strSQL As String = "INSERT INTO using(usrname,stat) values ('" & TextBox1.Text & "','00')"
                    'pulic.noquery(strSQL)   ' 屏蔽
                    '判断当前用户的权限, 并返回权限
                    Dim cmd2 As New String("select * from manager where username='" & TextBox1.Text & "' and passwd='" & TextBox2.Text & "'")
                    Dim myReader As SqlDataReader = pulic.execute(cmd2)
                    While myReader.Read()
                        Session("quyucode") = myReader("quyucode").trim
                        Session("deptcode") = myReader("deptcode").trim
                        Session("kecode") = myReader("kecode").trim
                        Session("taxcode") = myReader("taxcode").trim
                        Session("bz") = myReader("bz").trim
                        Session("quanxian") = myReader("quanxian").trim
                        Session("managerid") = myReader("id").trim
                        Session("using") = TextBox1.Text.Trim
                    End While
                    myReader.Close()


                    If (Session("bz") <> "admin") And (Session("bz") <> "sss") And (Session("bz") <> "fff") And (Session("bz") <> "kkk") Then
                        Session("s") = "nsrinf.quyucode='" & Session("quyucode") & "'" + " and nsrinf.deptcode='" & Session("deptcode") & "'" + " and nsrinf.kecode='" & Session("kecode") & "'" + " and nsrinf.taxcode='" & Session("taxcode") & "'"
                        Session("s1") = "quyucode='" & Session("quyucode") & "'" + " and deptcode='" & Session("deptcode") & "'" + " and kecode='" & Session("kecode") & "'" + " and taxcode='" & Session("taxcode") & "'"
                    Else
                        If Session("bz") = "admin" Then
                            Session("s") = ""
                            Session("s1") = ""
                        End If

                        If Session("bz") = "sss" Then
                            Session("s") = "nsrinf.quyucode='" & Session("quyucode") & "'"
                            Session("s1") = "quyucode='" & Session("quyucode") & "'"
                        End If
                        If Session("bz") = "fff" Then
                            Session("s") = "nsrinf.quyucode='" & Session("quyucode") & "'" + " and nsrinf.deptcode='" & Session("deptcode") & "'"
                            Session("s1") = "quyucode='" & Session("quyucode") & "'" + " and deptcode='" & Session("deptcode") & "'"
                        End If
                        If Session("bz") = "kkk" Then
                            Session("s") = "nsrinf.quyucode='" & Session("quyucode") & "'" + " and nsrinf.deptcode='" & Session("deptcode") & "'" + " and nsrinf.kecode='" & Session("kecode") & "'"
                            Session("s1") = "quyucode='" & Session("quyucode") & "'" + " and deptcode='" & Session("deptcode") & "'" + " and kecode='" & Session("kecode") & "'"
                        End If

                    End If

                    Dim riqi As String = Format(Now(), "yyyy-MM-dd dddd hh-mm-ss")
                    Dim strSQL1 As String = "INSERT INTO lg(name,start) values ('" & Trim(TextBox1.Text) & "','" & Trim(riqi) & "')"
                    '   pulic.noquery(strSQL1)

                    TextBox2.Text = ""
                    Response.Redirect("index.aspx")
                End If
            Else
                TextBox2.Text = ""
                Response.Redirect("cuowu.aspx")

            End If

            Me.Dispose()

        End If
    End Sub

    Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load
        TextBox1.Focus()
    End Sub
End Class