logonbox.ascx.cs

勇敢者论坛全部源代码。 支持SQL2000/Access数据库

			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@QICQ", System.Data.SqlDbType.VarChar, 50, "QICQ"));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Address", System.Data.SqlDbType.VarChar, 50, "Address"));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@HomePage", System.Data.SqlDbType.VarChar, 50, "HomePage"));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@work_Name", System.Data.SqlDbType.VarChar, 50, "work_Name"));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Phone", System.Data.SqlDbType.VarChar, 50, "Phone"));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Birthday", System.Data.SqlDbType.DateTime, 8, "Birthday"));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Memos", System.Data.SqlDbType.VarChar, 2147483647, "Memos"));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Reg_Date", System.Data.SqlDbType.DateTime, 8, "Reg_Date"));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@User_Grade", System.Data.SqlDbType.Int, 4, "User_Grade"));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Last_Date", System.Data.SqlDbType.DateTime, 8, "Last_Date"));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Logon_Counter", System.Data.SqlDbType.Int, 4, "Logon_Counter"));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_User_Name", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "User_Name", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Address", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Address", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Birthday", System.Data.SqlDbType.DateTime, 8, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Birthday", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Email", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Email", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_HomePage", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "HomePage", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Last_Date", System.Data.SqlDbType.DateTime, 8, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Last_Date", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Logon_Counter", System.Data.SqlDbType.Int, 4, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Logon_Counter", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Name", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Name", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Password", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Password", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Phone", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Phone", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_QICQ", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "QICQ", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Reg_Date", System.Data.SqlDbType.DateTime, 8, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Reg_Date", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_User_Grade", System.Data.SqlDbType.Int, 4, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "User_Grade", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_sex", System.Data.SqlDbType.Bit, 1, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "sex", System.Data.DataRowVersion.Original, null));
			this.sqlUpdateCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_work_Name", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "work_Name", System.Data.DataRowVersion.Original, null));
			// 
			// sqlDeleteCommand1
			// 
			this.sqlDeleteCommand1.CommandText = @"DELETE FROM Users WHERE (User_Name = @Original_User_Name) AND (Address = @Original_Address OR @Original_Address IS NULL AND Address IS NULL) AND (Birthday = @Original_Birthday OR @Original_Birthday IS NULL AND Birthday IS NULL) AND (Email = @Original_Email OR @Original_Email IS NULL AND Email IS NULL) AND (HomePage = @Original_HomePage OR @Original_HomePage IS NULL AND HomePage IS NULL) AND (Last_Date = @Original_Last_Date OR @Original_Last_Date IS NULL AND Last_Date IS NULL) AND (Logon_Counter = @Original_Logon_Counter OR @Original_Logon_Counter IS NULL AND Logon_Counter IS NULL) AND (Name = @Original_Name OR @Original_Name IS NULL AND Name IS NULL) AND (PKID = @Original_PKID) AND (Password = @Original_Password OR @Original_Password IS NULL AND Password IS NULL) AND (Phone = @Original_Phone OR @Original_Phone IS NULL AND Phone IS NULL) AND (QICQ = @Original_QICQ OR @Original_QICQ IS NULL AND QICQ IS NULL) AND (Reg_Date = @Original_Reg_Date OR @Original_Reg_Date IS NULL AND Reg_Date IS NULL) AND (User_Grade = @Original_User_Grade OR @Original_User_Grade IS NULL AND User_Grade IS NULL) AND (sex = @Original_sex OR @Original_sex IS NULL AND sex IS NULL) AND (work_Name = @Original_work_Name OR @Original_work_Name IS NULL AND work_Name IS NULL)";
			this.sqlDeleteCommand1.Connection = this.sqlConnection1;
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_User_Name", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "User_Name", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Address", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Address", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Birthday", System.Data.SqlDbType.DateTime, 8, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Birthday", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Email", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Email", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_HomePage", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "HomePage", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Last_Date", System.Data.SqlDbType.DateTime, 8, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Last_Date", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Logon_Counter", System.Data.SqlDbType.Int, 4, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Logon_Counter", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Name", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Name", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_PKID", System.Data.SqlDbType.Int, 4, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "PKID", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Password", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Password", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Phone", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Phone", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_QICQ", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "QICQ", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_Reg_Date", System.Data.SqlDbType.DateTime, 8, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "Reg_Date", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_User_Grade", System.Data.SqlDbType.Int, 4, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "User_Grade", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_sex", System.Data.SqlDbType.Bit, 1, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "sex", System.Data.DataRowVersion.Original, null));
			this.sqlDeleteCommand1.Parameters.Add(new System.Data.SqlClient.SqlParameter("@Original_work_Name", System.Data.SqlDbType.VarChar, 50, System.Data.ParameterDirection.Input, false, ((System.Byte)(0)), ((System.Byte)(0)), "work_Name", System.Data.DataRowVersion.Original, null));
			// 
			// sqlDataAdapter1
			// 
			this.sqlDataAdapter1.DeleteCommand = this.sqlDeleteCommand1;
			this.sqlDataAdapter1.InsertCommand = this.sqlInsertCommand1;
			this.sqlDataAdapter1.SelectCommand = this.sqlSelectCommand1;
			this.sqlDataAdapter1.TableMappings.AddRange(new System.Data.Common.DataTableMapping[] {
																									  new System.Data.Common.DataTableMapping("Table", "Users", new System.Data.Common.DataColumnMapping[] {
																																																			   new System.Data.Common.DataColumnMapping("PKID", "PKID"),
																																																			   new System.Data.Common.DataColumnMapping("User_Name", "User_Name"),
																																																			   new System.Data.Common.DataColumnMapping("Password", "Password"),
																																																			   new System.Data.Common.DataColumnMapping("Name", "Name"),
																																																			   new System.Data.Common.DataColumnMapping("sex", "sex"),
																																																			   new System.Data.Common.DataColumnMapping("Email", "Email"),
																																																			   new System.Data.Common.DataColumnMapping("QICQ", "QICQ"),
																																																			   new System.Data.Common.DataColumnMapping("Address", "Address"),
																																																			   new System.Data.Common.DataColumnMapping("HomePage", "HomePage"),
																																																			   new System.Data.Common.DataColumnMapping("work_Name", "work_Name"),
																																																			   new System.Data.Common.DataColumnMapping("Phone", "Phone"),
																																																			   new System.Data.Common.DataColumnMapping("Birthday", "Birthday"),
																																																			   new System.Data.Common.DataColumnMapping("Memos", "Memos"),
																																																			   new System.Data.Common.DataColumnMapping("Reg_Date", "Reg_Date"),
																																																			   new System.Data.Common.DataColumnMapping("User_Grade", "User_Grade"),
																																																			   new System.Data.Common.DataColumnMapping("Last_Date", "Last_Date"),
																																																			   new System.Data.Common.DataColumnMapping("Logon_Counter", "Logon_Counter")})});
			this.sqlDataAdapter1.UpdateCommand = this.sqlUpdateCommand1;
			// 
			// sqlCommand_FileDown
			// 
			this.sqlCommand_FileDown.Connection = this.sqlConnection1;

		}
		#endregion

        protected void Button1_Click(object sender, System.EventArgs e)
        {
            //检测用户信息，判断用户是否存在
            try
            {
                DataRow dr;
                string sql = "SELECT User_Name, Password, (SELECT UserGrade FROM UserGrade WHERE pkid = user_grade) AS UG, User_Grade FROM Users WHERE (User_Name =@UserName) AND (Password = @Password)";
               /* ArrayList pram = new ArrayList();
                pram.Add(TB_UserName.Text);
                pram.Add(TB_Password.Text);*/

                string DBtype = ConfigurationManager.AppSettings["DBtype"];
                if (DBtype == "Accsee")
                {
                    DBsql exsql = new DBsql();
                    exsql.Open();
                    OleDbDataAdapter da = new OleDbDataAdapter(sql, exsql.con);

                    da.SelectCommand.Parameters.Add(new OleDbParameter("@UserName", OleDbType.VarChar));
                    da.SelectCommand.Parameters.Add(new OleDbParameter("@Password", OleDbType.VarChar));
                    da.SelectCommand.Parameters["@UserName"].Value = TB_UserName.Text;
                    da.SelectCommand.Parameters["@Password"].Value = TB_Password.Text;

                    DataSet ds = new DataSet();
                    da.Fill(ds, "Users");
                    exsql.Close();
                    dr = ds.Tables[0].Rows[0];
                }
                else
                {
                    SqlConnection sqlConnection = new SqlConnection(System.Configuration.ConfigurationSettings.AppSettings["DBConnection"]);
                    SqlDataAdapter sqlAdapter1 = new SqlDataAdapter(sql, sqlConnection);
                    sqlAdapter1.SelectCommand.Parameters.Add(new SqlParameter("@UserName", SqlDbType.NVarChar));
                    sqlAdapter1.SelectCommand.Parameters.Add(new SqlParameter("@Password", SqlDbType.NVarChar));
                    sqlAdapter1.SelectCommand.Parameters["@UserName"].Value = TB_UserName.Text;
                    sqlAdapter1.SelectCommand.Parameters["@Password"].Value = TB_Password.Text;

                    DataSet product = new DataSet();
                    sqlAdapter1.Fill(product, "Users");
                    dr = product.Tables[0].Rows[0];
                }
                Session["UserGrade"] = dr["UG"].ToString();//GEtdATE()
                DBOperate.ExcSQL("UPDATE Users SET Logon_Counter = Logon_Counter + 1, Last_Date = '" + System.DateTime.Now.ToString() + "',Last_IP='" + this.Request.UserHostAddress + "' WHERE (User_Name = '" + TB_UserName.Text + "')");
                FormsAuthentication.RedirectFromLoginPage(TB_UserName.Text, CheckBox1.Checked);

                if (Request.QueryString["url"] != null)
                {
                    this.Response.Redirect(Server.UrlDecode(Request.QueryString["url"].ToString()));
                }
                else
                {
                    //this.Response.Redirect(this.Request.Url.ToString());
                    this.Response.Redirect("default2.aspx");
                }
            }
            catch (Exception)
            {
                Lbl_Hite.Text = "用户或口令错误！";
            }
        }
	}
}