userlogin.ascx.cs

visual stdio 2005

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data .OleDb ;
using System.Web.Services;

public partial class UserLogin : System.Web.UI.UserControl
{
    protected void Page_Load(object sender, EventArgs e)
    {
        //Response.Write("<script>alert('登陆加载!')</script>");

    }
    protected void Button1_Click(object sender, EventArgs e)
    {
        OleDbConnection cnA = new OleDbConnection();
        cnA.ConnectionString = "provider=Microsoft.Jet.OLEDB.4.0;data source=" + Server.MapPath("BDB/BookStore.mdb");
        string cmdtext = "SELECT username,password FROM userinfo ";
        OleDbCommand cmA = new OleDbCommand(cmdtext, cnA);
        cnA.Open();
        if (this.Tusername.Text == "")//判断输入完整信息
        {
            Response.Write("<script>alert('请输入完整信息!')</script>");
        }
        else
        {
            OleDbDataReader dr = cmA.ExecuteReader();


            if (dr == null)
            {
                cnA.Close();
            }
            bool i = false;
            while (dr.Read())
            {

                if (this.Tusername.Text == dr.GetValue(0).ToString() && this.Tpassword.Text == dr.GetValue(1).ToString())
                {
                    string nname = this.Tusername.Text;
                    string sst = "1";
                    string cctext = "Update userinfo set userstate='" + sst + "'WHERE username='"+nname+"';";
                    Session["name"] =nname;
                    OleDbCommand Comm = new OleDbCommand(cctext , cnA );
                    Comm.ExecuteNonQuery();
                    //UserWelcome1.Visible = true;
                    this.Visible = false;
                    Response.Write("<script>alert('登陆成功!')</script>");

                    Response.Redirect("welcome.aspx");
                   // Response.Redirect("Default2.aspx");
                    i = true;

                }
                else if (this.Tusername.Text == dr.GetValue(0).ToString() && this.Tpassword.Text != dr.GetValue(1).ToString())
                {
                    Response.Write("<script>alert('您的密码不正确!')</script>");
                    i = true;
                }

            }
            if (i == false)
            {
                Response.Write("<script>alert('该用户不存在!')</script>");
            }


        }
        this.Visible = false;
        cnA.Close();
        

    }
    
}