user_login.aspx.cs

基于VS05和SQL05做的一个电子商务网站

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using System.Data.SqlClient;
public partial class Form_User_Login : User_Login
{
    protected void Page_Load(object sender, EventArgs e)
    {

    }

    protected void imgBtnLogin_Click1(object sender, ImageClickEventArgs e)
    {
        string username;
        string password;

        //普通加密
        //获得要加密的字段，并转化为Byte[]数组
        /*byte[] data=System.Text .Encoding .Unicode .GetBytes (TextBox2.Text .ToCharArray ());
        //建立加密服务
        System.Security .Cryptography .MD5 md5=new System.Security .Cryptography.MD5CryptoServiceProvider ();
        //加密Byte[]数组
        byte[] result=md5.ComputeHash (data);
        //将加密后的数组转化为字段
        string sResult=System.Text.Encoding .Unicode .GetString (result);*/
        

        //作为密码方式加密
        string EnPswdStr = System.Web.Security.FormsAuthentication.HashPasswordForStoringInConfigFile(txtPwd.Text.ToString(), "MD5");
        username = InputText(txtName.Text);
        password = EnPswdStr;

        if (username.Equals("") || password.Equals(""))
        {
            Response.Write("<script language='JavaScript'>");
            Response.Write("alert('会员名和密码不能为空！')");
            Response.Write("</script>"); ;
            return;
        }

        SqlConnection connection = new SqlConnection(ConfigurationManager.AppSettings["ConnectionString"]);
        String sql = "SELECT * FROM Users where UserName='" + username + "' and PassWord='" + password + "'";
        DBConnection conn = new DBConnection();
        SqlDataReader dr = conn.ExecuteReader(sql);

        if (dr.Read())
        {
            Session["username"] = username;

            if (Request.QueryString["msg"] == null)
            {
                Response.Redirect("shop_manage.aspx");
            }
            else
            {
                Response.Redirect(Server.UrlDecode(Request.QueryString["msg"].ToString()));
            }

            return;
        }
        else
        {
            Response.Write("<script language='JavaScript'>");
            Response.Write("alert('您输入的会员名或密码有错！请重新输入！')");
            Response.Write("</script>");
            return;
        }
    }
}