admin_repwd.aspx.cs

教务管理系统

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class repassword : System.Web.UI.Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
        this.Title = "修改管理员密码";
        if (Session["user_id"]== null)
        {
            Response.Redirect("default.aspx");
        }
        
        string connsql = System.Configuration.ConfigurationManager.AppSettings["connstring"];
        SqlConnection conn = new SqlConnection(connsql);
        conn.Open();//连接数据库

        string strSql = "select * from users where User_id='" + Session["User_id"] + "'";
        
        SqlCommand com = new SqlCommand(strSql, conn);
        SqlDataReader dr = com.ExecuteReader();
        if (dr.Read())
        {
            
            if (dr["User_lever"].ToString() == "0")
            {
                Response.Redirect("default.aspx");
            }
            else
            {
                lblUsername.Text = "<b>" + Session["User_id"].ToString() +"</b>";
            }
        }        
       
    }
    protected void lbtnOK_Click(object sender, EventArgs e)
    {
        
        if(txtNewpwd.Text != txtRepwd.Text)
        {
            lblMsg.Text = "<b>两次输入的密码不相同！</b>";
            return;
        }
        string connsql = System.Configuration.ConfigurationManager.AppSettings["connstring"];
        SqlConnection connections = new SqlConnection(connsql);
        connections.Open();
        string sqlstrings = "update users set User_password='" + txtNewpwd.Text + "' where User_id=@id";
        SqlCommand sqlcmd = new SqlCommand(sqlstrings, connections);
        sqlcmd.Parameters.Add(new SqlParameter("@id", SqlDbType.VarChar, 50));
        sqlcmd.Parameters["@id"].Value = Session["user_id"].ToString();
        try
        {
            sqlcmd.ExecuteNonQuery();
            lblMsg.Text = "<b>修改成功，请单击【返回】！</b>";
        }
        catch (SqlException)
        {
            lblMsg.Text = "<b>修改失败！</b>";

        }
        connections.Close();
    }

    protected void lbtnBack_Click(object sender, EventArgs e)
    {
        Session.Clear();
        Response.Redirect("default.aspx");
    }

    
}