login.aspx.cs

很好的啊！中小型企业用的

using System;
using System.Data;
using System.Configuration;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;

public partial class _Default : System.Web.UI.Page 
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }
    protected void btmLogin_Click(object sender, ImageClickEventArgs e)
    {
        String sqlLogin = "select * from UserInfo where UserName='" +this.txtLoginId.Text+"' and PassWord='"+this.txtLoginPwd.Text+"'";
        String con = ConfigurationManager.AppSettings["MyConnection"].ToString();
        SqlConnection MyCon = new SqlConnection(con);
        MyCon.Open();
        SqlDataAdapter dat = new SqlDataAdapter(sqlLogin, con);
        DataSet ds = new DataSet();
        dat.Fill(ds);
        
 
        if (!(ds.Tables[0].Rows.Count >0))
        {
            Session["login"] = "1";
            Response.Redirect("errorPage.aspx?message=" + Session["login"].ToString());
        }
        else
        {
            
            SqlCommand cmd = new SqlCommand(sqlLogin, MyCon);
            SqlDataReader  reader = cmd.ExecuteReader();
            String RoleId;
            while(reader.Read())
            {
               RoleId=reader[5].ToString();
               Session["UserName"] = Request["txtLoginId"].ToString();
               Session["Userid"] = reader[0].ToString();
               Session["DepartId"] = reader[3].ToString();
               Session["Gender"] = reader[4].ToString();
               Session["Roleid"] = reader[5].ToString();
               Session["UserState"] = reader[6].ToString();
               Session["ImageName"] = reader[7].ToString();
               Session["name"] = reader[8].ToString();

               if (int.Parse(Session["UserState"].ToString()) ==2)
               {
                   Response.Redirect("MainForm.aspx?Roleid=" + RoleId);
               }

               else
               {
                   Response.Redirect("errorPage.aspx?message=" + Session["UserState"].ToString());
               }
            }

           
        }
        MyCon.Close();

    }
    protected void Button1_Click(object sender, EventArgs e)
    {
        Response.Redirect("renshi/zhuce.aspx");
    }
}