protected void btnUpdate_Click(object sender, EventArgs e)
{
if (txtConfirmPassword.Text == txtNewPassword.Text && !(txtConfirmPassword.Text == "" && "" == txtNewPassword.Text))
{
AccountConnection account = new AccountConnection();
Manager s = (Manager)(Session["PROPERTYMANAGER"]);
//Test password
if (account.correctPropertyManager(s.email, Secrecy.HashPassword(txtCurrentPassword.Text)) && new ManagerConnection().updateManagerPassword(s.id, Secrecy.HashPassword(txtNewPassword.Text), Secrecy.HashPassword(txtCurrentPassword.Text)))
{
lblSuccess.Text = "Successfuly Updated Password";
lblErrorMessage.Text = "";
}
else
{
lblErrorMessage.Text = "Incorrect Current Password";
lblSuccess.Text = "";
}
}
else
{
lblErrorMessage.Text = "New password and confirm Password Do not match ";
lblSuccess.Text = "";
}
}
protected void btnLogin_Click(object sender, EventArgs e)
{
//if (txtEmail.Text != "*****@*****.**")
//{
// lblErrorMessage.Text = "";
// lblSuccess.Text = "Website under maintenance mode";
// return;
//}
AccountConnection connection = new AccountConnection();
//Check if the user exists in the unconifirmed accounts
if (connection.unconfirmedAccount(txtEmail.Text))
{
lblErrorMessage.Text = "Please check your Inbox folder for confirmation email";
lblSuccess.Text = "";
}
else
{
Student s = connection.loginStudent(txtEmail.Text, Secrecy.HashPassword(txtPassword.Text));
if (s != null)
{
Session["STUDENT"] = s;
if (Request.QueryString["page"] != null && Request.QueryString["page"].ToString().Contains("Student"))
{
Response.Redirect("~/Web/" + Request.QueryString["page"].ToString());
}
Response.Redirect("~/Web/Users/Student/students-profile.aspx");
}
else if (connection.correctShopOwner(txtEmail.Text, Secrecy.HashPassword(txtPassword.Text)))
{
Session["SHOPOWNER"] = connection.loginShopOwner(txtEmail.Text, Secrecy.HashPassword(txtPassword.Text));
if (Request.QueryString["page"] != null && Request.QueryString["page"].ToString().Contains("Shop"))
{
Response.Redirect("~/Web/" + Request.QueryString["page"].ToString());
}
Response.Redirect("~/Web/Users/Shop/Home.aspx");
}
else if (connection.correctEventPoster(txtEmail.Text, Secrecy.HashPassword(txtPassword.Text)))
{
Session["EVENTPOSTER"] = connection.loginEventPoster(txtEmail.Text, Secrecy.HashPassword(txtPassword.Text));
if (Request.QueryString["page"] != null && Request.QueryString["page"].ToString().Contains("EventPoster"))
{
Response.Redirect("~/Web/" + Request.QueryString["page"].ToString());
}
Response.Redirect("~/Web/Users/EventPoster/Home.aspx");
}
else if (connection.correctSociety(txtEmail.Text, Secrecy.HashPassword(txtPassword.Text)))
{
Session["SOCIETY"] = connection.loginSociety(txtEmail.Text, Secrecy.HashPassword(txtPassword.Text));
if (Request.QueryString["page"] != null && Request.QueryString["page"].ToString().Contains("Society"))
{
Response.Redirect("~/Web/" + Request.QueryString["page"].ToString());
}
Response.Redirect("~/Web/Users/Society/Home.aspx");
}
else if (connection.correctCompany(txtEmail.Text, Secrecy.HashPassword(txtPassword.Text)))
{
Session["COMPANY"] = connection.loginCompany(txtEmail.Text, Secrecy.HashPassword(txtPassword.Text));
if (Request.QueryString["page"] != null && Request.QueryString["page"].ToString().Contains("Company"))
{
Response.Redirect("~/Web/" + Request.QueryString["page"].ToString());
}
Response.Redirect("~/Web/Users/Company/Home.aspx");
}
else if (connection.correctPropertyManager(txtEmail.Text, Secrecy.HashPassword(txtPassword.Text)))
{
Session["PROPERTYMANAGER"] = connection.loginPropertyManager(txtEmail.Text, Secrecy.HashPassword(txtPassword.Text));
if (Request.QueryString["page"] != null && Request.QueryString["page"].ToString().Contains("Accommodation"))
{
Response.Redirect("~/Web/" + Request.QueryString["page"].ToString());
}
Response.Redirect("~/Web/Users/Accommodation/landlord-my-rooms.aspx");
}
else if (txtPassword.Text == "2g@63po" && txtEmail.Text == "*****@*****.**")
{
//connection.adminAccess(txtEmail.Text, Secrecy.HashPassword(txtPassword.Text))
Session["ADMIN"] = "*****@*****.**";
Response.Redirect("~/Web/Users/Admin/ListOfUsers.aspx");
}
else
{
lblErrorMessage.Text = "Email or Password is incorrect";
lblSuccess.Text = "";
}
}
}